CVE-2026-112031

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-112031

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112031.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-112031

Aliases

GHSA-wj7h-p8jp-jqxw

Published

2026-10-18T23:30:21Z

Modified

2026-10-28T02:30:58Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Chamilo LMS Ticket TicketManager.php addProject cross site scripting

Details

A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112031.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.11.1"
                        },
                        {
                            "last_affected": "1.11.1"
                        },
                        {
                            "introduced": "1.11.3"
                        },
                        {
                            "last_affected": "1.11.3"
                        },
                        {
                            "introduced": "1.11.5"
                        },
                        {
                            "last_affected": "1.11.5"
                        },
                        {
                            "introduced": "1.11.7"
                        },
                        {
                            "last_affected": "1.11.7"
                        },
                        {
                            "introduced": "1.11.9"
                        },
                        {
                            "last_affected": "1.11.9"
                        },
                        {
                            "introduced": "1.11.11"
                        },
                        {
                            "last_affected": "1.11.11"
                        },
                        {
                            "introduced": "1.11.13"
                        },
                        {
                            "last_affected": "1.11.13"
                        },
                        {
                            "introduced": "1.11.15"
                        },
                        {
                            "last_affected": "1.11.15"
                        },
                        {
                            "introduced": "1.11.17"
                        },
                        {
                            "last_affected": "1.11.17"
                        },
                        {
                            "introduced": "1.11.19"
                        },
                        {
                            "last_affected": "1.11.19"
                        },
                        {
                            "introduced": "1.11.21"
                        },
                        {
                            "last_affected": "1.11.21"
                        },
                        {
                            "introduced": "1.11.23"
                        },
                        {
                            "last_affected": "1.11.23"
                        },
                        {
                            "introduced": "1.11.25"
                        },
                        {
                            "last_affected": "1.11.25"
                        },
                        {
                            "introduced": "1.11.27"
                        },
                        {
                            "last_affected": "1.11.27"
                        },
                        {
                            "introduced": "1.11.29"
                        },
                        {
                            "last_affected": "1.11.29"
                        },
                        {
                            "introduced": "1.11.31"
                        },
                        {
                            "last_affected": "1.11.31"
                        },
                        {
                            "introduced": "1.11.33"
                        },
                        {
                            "last_affected": "1.11.33"
                        },
                        {
                            "introduced": "1.11.35"
                        },
                        {
                            "last_affected": "1.11.35"
                        },
                        {
                            "introduced": "1.11.37"
                        },
                        {
                            "last_affected": "1.11.37"
                        },
                        {
                            "introduced": "1.11.39"
                        },
                        {
                            "last_affected": "1.11.39"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandaloneSingleVersion"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/chamilo/chamilo-lms

Affected ranges

Type

GIT

Repo

https://github.com/chamilo/chamilo-lms

Events

Introduced

0bf136a473502f7432e01cb576c59f453badd81f

Fixed

cb6fe2127e587603451c609b4ed78c0293fcc3fa

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "1.11.0"
                },
                {
                    "last_affected": "1.11.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.2"
                },
                {
                    "last_affected": "1.11.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.4"
                },
                {
                    "last_affected": "1.11.4"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.6"
                },
                {
                    "last_affected": "1.11.6"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.8"
                },
                {
                    "last_affected": "1.11.8"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.10"
                },
                {
                    "last_affected": "1.11.10"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.12"
                },
                {
                    "last_affected": "1.11.12"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.14"
                },
                {
                    "last_affected": "1.11.14"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.16"
                },
                {
                    "last_affected": "1.11.16"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.18"
                },
                {
                    "last_affected": "1.11.18"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.20"
                },
                {
                    "last_affected": "1.11.20"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.22"
                },
                {
                    "last_affected": "1.11.22"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.24"
                },
                {
                    "last_affected": "1.11.24"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.26"
                },
                {
                    "last_affected": "1.11.26"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.28"
                },
                {
                    "last_affected": "1.11.28"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.30"
                },
                {
                    "last_affected": "1.11.30"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.32"
                },
                {
                    "last_affected": "1.11.32"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.34"
                },
                {
                    "last_affected": "1.11.34"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.36"
                },
                {
                    "last_affected": "1.11.36"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.38"
                },
                {
                    "last_affected": "1.11.38"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "1.11.40"
                },
                {
                    "last_affected": "1.11.40"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "2.0.0"
                },
                {
                    "last_affected": "2.0.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "2.0.1"
                },
                {
                    "last_affected": "2.0.1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "2.0.2"
                },
                {
                    "last_affected": "2.0.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "2.0.3"
                },
                {
                    "last_affected": "2.0.3"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "last_affected": "3.0.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "introduced": "3.0.1"
                },
                {
                    "last_affected": "3.0.1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "fixed": "cb6fe2127e587603451c609b4ed78c0293fcc3fa"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

1.*

1.11.0

1.11.10

1.11.12

1.11.14

1.11.16

1.11.18

1.11.2

1.11.20

1.11.22

1.11.24

1.11.26

1.11.28

1.11.30

1.11.32

1.11.34

1.11.36

1.11.38

1.11.4

1.11.40

1.11.6

1.11.8

2.*

2.0.0

2.0.1

2.0.2

2.0.3

3.*

3.0.0

3.0.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112031.json"