CVE-2026-112031

LOW 3.5

Chamilo LMS Ticket TicketManager.php addProject cross site scripting

CVSS Score

3.5

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.

CWE	CWE-79 CWE-94
Vendor	chamilo
Product	lms
Published	Oct 18, 2026

Stay Ahead of the Next One

Get instant alerts for chamilo lms

Be the first to know when new low vulnerabilities affecting chamilo lms are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Chamilo / LMS

1.11.0 1.11.1 1.11.2 1.11.3 1.11.4 1.11.5 1.11.6 1.11.7 1.11.8 1.11.9 1.11.10 1.11.11 1.11.12 1.11.13 1.11.14 1.11.15 1.11.16 1.11.17 1.11.18 1.11.19 1.11.20 1.11.21 1.11.22 1.11.23 1.11.24 1.11.25 1.11.26 1.11.27 1.11.28 1.11.29 1.11.30 1.11.31 1.11.32 1.11.33 1.11.34 1.11.35 1.11.36 1.11.37 1.11.38 1.11.39 1.11.40 2.0.0 2.0.1 2.0.2 2.0.3 3.0.0 3.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/421679 vuldb.com: https://vuldb.com/vuln/421679/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112031 vuldb.com: https://vuldb.com/submit/1025429 github.com: https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw github.com: https://github.com/chamilo/chamilo-lms/pull/9228 github.com: https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa

Credits

🔍 M. Zaeem Shafqat (VulDB User)