CVE-2025-59543 Chamilo: Account Takeover via Stored XSS in Course Description

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting XSS vulnerability. By injecting malicious JavaScript into the course description field, an attacker with a low-privileged account e.g., trainer can execute arbitrary JavaScript code in the...

EUVD-2025-208336

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting XSS vulnerability. By injecting malicious JavaScript into the course description field, an attacker with a low-privileged account e.g., trainer can execute arbitrary JavaScript code in the...

CVE-2025-59543

PT‑Security disclosures identifier CVE-2025-59543 as an Account Takeover (Critical) vulnerability affecting a major LMS with 30M+ users; public details are pending. The connected documents do not specify product/vendor/version or remediation, and no exploit details are provided.