CVE-2023-31803

MediumCVSS 4.8

Published: 09/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability was found in Chamilo LMS version 1.11.18. It allows a local attacker to execute arbitrary code via the resource sequencing parameters.

Risk Assessment

An attacker can inject malicious scripts, leading to session theft, account takeover, or content modification within the LMS system.

Recommendation

Immediately update Chamilo LMS to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters.