CVE-2023-34944: Chamilo Lms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file.

Affected products

• Chamilo Chamilo Lms: from 1.11.0, up to and including 1.11.18

Published 2023-06-13. Last modified 2026-07-09.