CVE-2026-45144
Chamilo LMS is an open-source learning management system
- Risk score
- 53/100
- CVSS
- 8.9 v3.1
- Published
- 30 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, GET /user/{username} is anonymously reachable and renders six user-editable profile fields (firstname, lastname, competences, openarea, teach, and diplomas) inside {% autoescape false %}, without server-side sanitization on the write pat…
- Affected
- See advisory
- Fix
- Upgrade the product to 2.0.1 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 8.9 high
References
Original description
Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /user/{username}` is anonymously reachable and renders six user-editable profile fields (`firstname`, `lastname`, `competences`, `openarea`, `teach`, and `diplomas`) inside `{% autoescape false %}`, without server-side sanitization on the write path. A ROLE_STUDENT attacker can plant HTML in their own profile; self-registration, when enabled, lets an otherwise anonymous attacker obtain that role. The stored content executes in the browser of any visitor, including administrators, who follows the public profile link, potentially allowing account takeover through session, JWT, or `localStorage` exfiltration. This issue is fixed in version 2.0.1.
Last activity 30 Oct 2026. Patch Forecast updates every hour.