A vulnerability was found in Chamilo LMS up to 1.11.27. It has been rated as critical. The impacted element is an unknown function of the component SOAP Request Handler. This manipulation causes improper neutralization of directives in dynamically evaluated code.
This vulnerability is registered as CVE-2025-50187. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.
