CVE-2023-4222 (published 2023-11-28T07:15:36.819Z)
Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.
Affected products: Vendor: Chamilo
Product: Chamilo
Versions: 0