CVE-2020-23127: Chamilo Lms

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Chamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function by targeting an admin user.

Affected products

• Chamilo Chamilo Lms: version 1.11.10 only

Published 2021-05-06. Last modified 2026-06-17.