Cross-Site Request Forgery

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.CVE-2021-40662Chamilo · 1.1% likely

   CWE-352

2. Chamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function by targeting an admin user.CVE-2020-23127Chamilo · 0.8% likely

   CWE-352

3. Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execute arbitrary code.CVE-2023-39061Chamilo · 0.3% likely

   CWE-352

4. A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to initiate a request that posts a fake post onto the user's soc…CVE-2024-30617Chamilo · CVSS 5.4 · 0.2% likely

   CWE-352

5. Chamilo: CSRF Vulnerability in Project DeletionCVE-2025-59541chamilo · CVSS 8.1 · 0.2% likely

   CWE-352

6. Chamilo LMS: CSRF in destructive skill-management AJAX actionsCVE-2026-45141chamilo · CVSS 6.5 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.