Security Chamilo LMS 1.9.10 Cross Site Request Forgery / Cross Site Scripting March 19, 2015 007admin Leave a comment Chamilo LMS versions 1.9.10 and below suffer from cross site request forgery and cross site scripting vulnerabilities.