{"id":"CVE-2026-112031","summary":"Chamilo LMS Ticket TicketManager.php addProject cross site scripting","details":"A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.","aliases":["GHSA-wj7h-p8jp-jqxw"],"modified":"2026-10-19T10:45:26.917856740Z","published":"2026-10-18T23:30:21.096Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-79","CWE-94"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112031.json","unresolved_ranges":[{"extracted_events":[{"introduced":"1.11.1"},{"last_affected":"1.11.1"},{"introduced":"1.11.3"},{"last_affected":"1.11.3"},{"introduced":"1.11.5"},{"last_affected":"1.11.5"},{"introduced":"1.11.7"},{"last_affected":"1.11.7"},{"introduced":"1.11.9"},{"last_affected":"1.11.9"},{"introduced":"1.11.11"},{"last_affected":"1.11.11"},{"introduced":"1.11.13"},{"last_affected":"1.11.13"},{"introduced":"1.11.15"},{"last_affected":"1.11.15"},{"introduced":"1.11.17"},{"last_affected":"1.11.17"},{"introduced":"1.11.19"},{"last_affected":"1.11.19"},{"introduced":"1.11.21"},{"last_affected":"1.11.21"},{"introduced":"1.11.23"},{"last_affected":"1.11.23"},{"introduced":"1.11.25"},{"last_affected":"1.11.25"},{"introduced":"1.11.27"},{"last_affected":"1.11.27"},{"introduced":"1.11.29"},{"last_affected":"1.11.29"},{"introduced":"1.11.31"},{"last_affected":"1.11.31"},{"introduced":"1.11.33"},{"last_affected":"1.11.33"},{"introduced":"1.11.35"},{"last_affected":"1.11.35"},{"introduced":"1.11.37"},{"last_affected":"1.11.37"},{"introduced":"1.11.39"},{"last_affected":"1.11.39"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112031.json"},{"type":"FIX","url":"https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa"},{"type":"FIX","url":"https://github.com/chamilo/chamilo-lms/pull/9228"},{"type":"ADVISORY","url":"https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112031"},{"type":"ADVISORY","url":"https://vuldb.com/cve/CVE-2026-112031"},{"type":"ADVISORY","url":"https://vuldb.com/submit/1025429"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/421679"},{"type":"REPORT","url":"https://vuldb.com/vuln/421679/cti"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/chamilo/chamilo-lms","events":[{"introduced":"0bf136a473502f7432e01cb576c59f453badd81f"},{"last_affected":"4e8611582e7c03112aea44a18db7ec91d7db8191"}],"database_specific":{"extracted_events":[{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.11.2"},{"last_affected":"1.11.2"},{"introduced":"1.11.4"},{"last_affected":"1.11.4"},{"introduced":"1.11.6"},{"last_affected":"1.11.6"},{"introduced":"1.11.8"},{"last_affected":"1.11.8"},{"introduced":"1.11.10"},{"last_affected":"1.11.10"},{"introduced":"1.11.12"},{"last_affected":"1.11.12"},{"introduced":"1.11.14"},{"last_affected":"1.11.14"},{"introduced":"1.11.16"},{"last_affected":"1.11.16"},{"introduced":"1.11.18"},{"last_affected":"1.11.18"},{"introduced":"1.11.20"},{"last_affected":"1.11.20"},{"introduced":"1.11.22"},{"last_affected":"1.11.22"},{"introduced":"1.11.24"},{"last_affected":"1.11.24"},{"introduced":"1.11.26"},{"last_affected":"1.11.26"},{"introduced":"1.11.28"},{"last_affected":"1.11.28"},{"introduced":"1.11.30"},{"last_affected":"1.11.30"},{"introduced":"1.11.32"},{"last_affected":"1.11.32"},{"introduced":"1.11.34"},{"last_affected":"1.11.34"},{"introduced":"1.11.36"},{"last_affected":"1.11.36"},{"introduced":"1.11.38"},{"last_affected":"1.11.38"},{"introduced":"1.11.40"},{"last_affected":"1.11.40"},{"introduced":"2.0.0"},{"last_affected":"2.0.0"},{"introduced":"2.0.1"},{"last_affected":"2.0.1"},{"introduced":"2.0.2"},{"last_affected":"2.0.2"},{"introduced":"2.0.3"},{"last_affected":"2.0.3"},{"introduced":"3.0.0"},{"last_affected":"3.0.0"},{"introduced":"3.0.1"},{"last_affected":"3.0.1"}],"source":"AFFECTED_FIELD"}}],"versions":["1.11.0","1.11.10","1.11.12","1.11.14","1.11.16","1.11.18","1.11.2","1.11.20","1.11.22","1.11.24","1.11.26","1.11.28","1.11.30","1.11.32","1.11.34","1.11.36","1.11.38","1.11.4","1.11.40","1.11.6","1.11.8","2.0.0","2.0.1","2.0.2","2.0.3","3.0.0","3.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112031.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}]}