CVE-2023-4221 (published 2023-11-28T07:13:51.191Z)
Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.
Affected products: Vendor: Chamilo
Product: Chamilo
Versions: 0