PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-112031 Chamilo CVE debrief

A cross-site scripting vulnerability exists in Chamilo LMS up to 1.11.40/2.0.3/3.0.1, specifically in the TicketManager::addProject function of the TicketModule. This issue allows remote attackers to execute a manipulation of the argument Name, leading to cross-site scripting. The exploit has been publicly disclosed and may be utilized. Defenders responsible for Chamilo LMS deployments should assess exposure and prioritize patching this vulnerability. This issue may impact LMS users and administrators, potentially allowing attackers to perform cross-site scripting attacks. Further verification is required to determine the full scope of affected versions and potential impact.

Vendor
Chamilo
Product
LMS
CVSS
MEDIUM 5.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-18
Original CVE updated
2026-10-19
Advisory published
2026-10-18
Advisory updated
2026-10-19

Who should care

Defenders responsible for Chamilo LMS deployments should assess exposure and prioritize patching this vulnerability. This issue may impact LMS users and administrators, potentially allowing attackers to perform cross-site scripting attacks.

Why it matters

A cross-site scripting vulnerability exists in Chamilo LMS, allowing remote attackers to manipulate the argument Name in the TicketManager::addProject function. Defenders should prioritize patching and assess exposure.

  • Cross-site scripting attacks may be performed remotely, potentially impacting LMS users and administrators.
  • Defenders should verify the presence of the TicketModule and assess exposure to this vulnerability.
  • Patching is recommended to prevent exploitation of this publicly disclosed vulnerability.
  • Further verification is required to determine the full scope of affected versions and potential impact.

Technical summary

The vulnerability exists in the TicketManager::addProject function of the TicketModule in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This function is located in the file main/inc/lib/TicketManager.php. The vulnerability allows remote attackers to execute a manipulation of the argument Name, leading to cross-site scripting. Defenders should prioritize patching this vulnerability, as it is publicly disclosed and may be utilized by attackers. The exploit has been publicly disclosed and may be utilized. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module.

Defensive priority

Defenders should prioritize patching this vulnerability, as it is publicly disclosed and may be utilized by attackers.

Recommended defensive actions

  • Apply the patch 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa to resolve this issue.
  • Review and update Chamilo LMS to the latest version.
  • Monitor for suspicious activity on the Ticket Module.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
  • Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. The exploit has been publicly disclosed and may be utilized. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-112031 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-112031

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-112031 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-112031

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Chamilo LMS Ticket TicketManager.php addProject cross site scripting

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112031.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/421679

    Supplemental source - vdb-entry, technical-description

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/421679/cti

    Supplemental source - signature, permissions-required

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/cve/CVE-2026-112031

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/1025429

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw

    Supplemental source - broken-link

  • Source reference

    Unverified legacy reference

    URL: https://github.com/chamilo/chamilo-lms/pull/9228

    Supplemental source - issue-tracking, patch

  • Source reference

    Unverified legacy reference

    URL: https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa

    Supplemental source - patch

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.