high7.2
CVE-2022-27421
Chamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to escalate privileges to Platform Admin.
Impact
Chamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to escalate privileges to Platform Admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chamilo | Chamilo Lms | through 1.11.14 |