CVE-2020-23126 - CVE House

Status published Medium CVE-2020-23126

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the...

6.1 CVSS

Vulnerability Description

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-23126

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-42-2020-04-23-High-risk-low-impact-XSS-in-extended-users-profile-fields

More from chamilo

View All →

CVE-2025-66447

Chamilo LMS has validation-less redirect on login page

Unknown 0

CVE-2025-59544

Chamilo: Unauthorized access to update category of any user

Medium 6.9

CVE-2025-59543

Chamilo: Account Takeover via Stored XSS in Course Description

Critical 9.1

CVE-2025-59542

Chamilo: Account Takeover via Stored XSS in Course Learning Paths

Critical 9.1

CVE-2025-59541

Chamilo: CSRF Vulnerability in Project Deletion

High 8.1

Affected Vendor

chamilo

View all reports →

Affected Software

chamilo lms

Vulnerable Versions:

1.11.10

Timeline

Official Publish: November 3rd, 2021

Last Modified: August 4th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.