CVE-2026-45141

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the add, deletegradebookfromskill, saveprofile, and deleteprofile actions in public/main/inc/ajax/skill.ajax.php perform database mutations without Security::checktoken validation. An attacker can use cross-site request...