CVE-2020-23128: Chamilo Lms

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

Chamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions administrator privilege to create a new user then use the edit user function to change this new user to administrator privilege.

Affected products

• Chamilo Chamilo Lms: version 1.11.10 only

Published 2021-05-06. Last modified 2026-06-17.