CVE-2025-26153

Vulnerability Description

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message.

Vulnerability Details

Published Date

April 16, 2025

Last Modified

April 18, 2025

Source

NVD

CVE-2025-26153

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment