CVE-2021-40662: Chamilo

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.

Affected products

• Chamilo Chamilo: version 1.11.14 only

Published 2022-03-21. Last modified 2026-06-17.