CVE-2018-20329: Chamilo Lms

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.

Affected products

• Chamilo Chamilo Lms: version 1.11.8 only

Published 2018-12-21. Last modified 2026-06-17.