CVE-2026-34161 | Chamilo LMS up to 2.0.0-RC.2 social_post_attachments cross site scripting (GHSA-273p-jw9w-3g22)

A vulnerability classified as problematic was found in Chamilo LMS up to 2.0.0-RC.2. This vulnerability affects unknown code of the file /api/social_post_attachments. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-34161. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.