A vulnerability classified as problematic has been found in Chamilo LMS up to 1.11.29. Affected by this vulnerability is an unknown functionality of the file session/add_users_to_session.php. This manipulation of the argument page causes cross site scripting.

This vulnerability appears as CVE-2025-52563. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.