CVE-2026-45144 - Chamilo LMS: Stored XSS in public user-profile fields
CVE ID :CVE-2026-45144 Published : Oct. 30, 2026, 3:16 p.m. | 43 minutes ago Description :Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /user/{username}` is anonymously reachable and renders six user-editable profile fields (`firstname`, `lastname`,...