CVE-2021-37390: Chamilo Lms

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social network search feature).

Affected products

• Chamilo Chamilo Lms: before 1.11.14 (fixed in 1.11.14)

Published 2021-08-10. Last modified 2026-06-17.