CVE-2026-112031

A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.

CVSS v3 3.5 LOW
CVSS v2.0 4.0 MEDIUM

3.5^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.1 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa
https://github.com/chamilo/chamilo-lms/pull/9228
https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw
https://vuldb.com/cve/CVE-2026-112031
https://vuldb.com/submit/1025429
https://vuldb.com/vuln/421679
https://vuldb.com/vuln/421679/cti

Configurations

No configuration.

History

19 Oct 2026, 00:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-19 00:16

Updated : 2026-10-19 17:17

NVD link : CVE-2026-112031

Mitre link : CVE-2026-112031

CVE.ORG link : CVE-2026-112031

JSON object : View

Products Affected

No product.

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-112031", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-112031", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-19T16:23:29.407665Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.1}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.0, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:chamilo:lms:*:*:*:*:*:*:*:*"], "vendor": "Chamilo", "modules": ["Ticket Module"], "product": "LMS", "versions": [{"status": "affected", "version": "1.11.0"}, {"status": "affected", "version": "1.11.1"}, {"status": "affected", "version": "1.11.2"}, {"status": "affected", "version": "1.11.3"}, {"status": "affected", "version": "1.11.4"}, {"status": "affected", "version": "1.11.5"}, {"status": "affected", "version": "1.11.6"}, {"status": "affected", "version": "1.11.7"}, {"status": "affected", "version": "1.11.8"}, {"status": "affected", "version": "1.11.9"}, {"status": "affected", "version": "1.11.10"}, {"status": "affected", "version": "1.11.11"}, {"status": "affected", "version": "1.11.12"}, {"status": "affected", "version": "1.11.13"}, {"status": "affected", "version": "1.11.14"}, {"status": "affected", "version": "1.11.15"}, {"status": "affected", "version": "1.11.16"}, {"status": "affected", "version": "1.11.17"}, {"status": "affected", "version": "1.11.18"}, {"status": "affected", "version": "1.11.19"}, {"status": "affected", "version": "1.11.20"}, {"status": "affected", "version": "1.11.21"}, {"status": "affected", "version": "1.11.22"}, {"status": "affected", "version": "1.11.23"}, {"status": "affected", "version": "1.11.24"}, {"status": "affected", "version": "1.11.25"}, {"status": "affected", "version": "1.11.26"}, {"status": "affected", "version": "1.11.27"}, {"status": "affected", "version": "1.11.28"}, {"status": "affected", "version": "1.11.29"}, {"status": "affected", "version": "1.11.30"}, {"status": "affected", "version": "1.11.31"}, {"status": "affected", "version": "1.11.32"}, {"status": "affected", "version": "1.11.33"}, {"status": "affected", "version": "1.11.34"}, {"status": "affected", "version": "1.11.35"}, {"status": "affected", "version": "1.11.36"}, {"status": "affected", "version": "1.11.37"}, {"status": "affected", "version": "1.11.38"}, {"status": "affected", "version": "1.11.39"}, {"status": "affected", "version": "1.11.40"}, {"status": "affected", "version": "2.0.0"}, {"status": "affected", "version": "2.0.1"}, {"status": "affected", "version": "2.0.2"}, {"status": "affected", "version": "2.0.3"}, {"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.1"}]}]}], "published": "2026-10-19T00:16:31.587", "references": [{"url": "https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa", "source": "cna@vuldb.com"}, {"url": "https://github.com/chamilo/chamilo-lms/pull/9228", "source": "cna@vuldb.com"}, {"url": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/cve/CVE-2026-112031", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/1025429", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/421679", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/421679/cti", "source": "cna@vuldb.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-79"}, {"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue."}], "lastModified": "2026-10-19T17:17:08.257", "sourceIdentifier": "cna@vuldb.com"}