CVE-2023-31805

MediumCVSS 4.8

Published: 09/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

A Cross Site Scripting vulnerability was found in Chamilo LMS version 1.11.18. It allows a local authenticated attacker to execute arbitrary code via the homepage function.

Risk Assessment

The risk includes session hijacking, administrator account takeover, or malware distribution within the organization.

Recommendation

Immediately update Chamilo LMS to the latest available version that fixes this vulnerability. Additionally, restrict user permissions to edit the homepage.

Original NVD description (English source)

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbitrary code via the homepage function.