CVE-2023-36484

MediumCVSS 6.1

Published: 29/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

ILIAS versions 7.21 and 8.0_beta1 through 8.2 are vulnerable to reflected Cross-Site Scripting (XSS).

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to the latest version of ILIAS to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).