CVE-2023-31800

MediumCVSS 5.4

Published: 09/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

A Cross-Site Scripting vulnerability was found in Chamilo LMS version 1.11.18. A local attacker can execute arbitrary JavaScript code via the forum title parameter.

Risk Assessment

An attacker can hijack user sessions, steal sensitive data, or spread malicious content within the organization, compromising confidentiality and integrity.

Recommendation

Immediately upgrade Chamilo LMS to the latest version and implement input filtering and validation for the forum title parameter.

Original NVD description (English source)

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter.