Beveiligingsadvies

CVE-2025-55208

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-05 20:58:27
Laatst bijgewerkt 2026-03-06 10:43:43
Toegewezen door GitHub_M
CVSS-score 9.1
Status PUBLISHED

Beschrijving

Chamilo is a learning management system. Versions prior to 1.11.34 have a Stored XSS through insecure file uploads in `Social Networks`. Through it, a low-privilege user can execute arbitrary code in the admin user inbox, allowing takeover of the admin account. Version 1.11.34 fixes the issue.