CVE-2025-50198

Publication date

2026-03-02 15:46:46

Family

GitHub_M

State

PUBLISHED

Description

Chamilo is a learning management system. Prior to version 1.11.30, Chamilo is vulnerable to deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration_file; POST course_path; POST home_path parameters. This issue has been patched in version 1.11.30.