CVE-2026-45141

Chamilo LMS, an open-source learning management system, is vulnerable to Cross-Site Request Forgery (CSRF) in versions prior to 2.0.1 . The vulnerability exists because the add, delete_gradebook_from_skill, save_profile, and delete_profile actions within public/main/inc/ajax/skill.ajax.php perfor...