CVE-2023-36488

MediumCVSS 5.4

Published: 29/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

ILIAS versions 7.21 and 8.0_beta1 through 8.2 are vulnerable to stored Cross Site Scripting (XSS).

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to the latest version of ILIAS to mitigate this vulnerability.

Original NVD description (English source)

ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to stored Cross Site Scripting (XSS).