CVE-2023-31807

MediumCVSS 5.4

Published: 09/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

A Cross-Site Scripting vulnerability was found in Chamilo LMS version 1.11.18. It allows a local attacker to execute arbitrary code via a crafted payload in the personal notes function.

Risk Assessment

The risk includes session hijacking, account takeover, or spreading malicious code within the e-learning platform.

Recommendation

Immediately update Chamilo LMS to the latest available version and implement input validation and filtering mechanisms in the personal notes function.

Original NVD description (English source)

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function.