XSS Vulnerability in Chamilo Learning Management System

CVE-2025-52564

What is CVE-2025-52564?

Chamilo LMS, a popular learning management system, exhibits a vulnerability due to inadequate sanitization of user input in the help.php file. This flaw allows attackers to inject arbitrary HTML code, potentially compromising user data and system integrity. By crafting a malicious URL, an attacker can exploit this vulnerability to execute scripts in the context of the victim's browser. The issue was resolved in version 1.11.30, emphasizing the necessity of updating to safeguard against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References