CVE-2026-112031 | Chamilo LMS up to 1.11.40/2.0.3/3.0.1 Ticket TicketManager.php addProject name cross site scripting (GHSA-wj7h-p8jp-jqxw)

October 18, 2026 Yanac

A vulnerability described as problematic has been identified in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting.

This vulnerability appears as CVE-2026-112031. The attack may be performed from remote. In addition, an exploit is available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More