CVE-2026-112031 in LMS
Prediction
by VulDB Data Team • 10/18/2026
A vulnerability was determined in <a href="/product/chamilo:lms">Chamilo LMS up to 1.11.40/2.0.3/3.0.1</a>. This issue affects the function <code>TicketManager::addProject</code> of the file <em>main/inc/lib/TicketManager.php</em> of the component <em>Ticket Module</em>. Executing a manipulation of the argument <em>Name</em> can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called <em>6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa</em>. It is best practice to apply a patch to resolve this issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.