All packages
ILIAS vulnerabilities
3 known CVE vulnerabilities in ILIAS, translated and rated.
- CVE-2026-12789Medium
A SQL injection vulnerability was found in ILIAS Learning Management System 11.0 in the ilTrQuery::executeQueries function of the class.ilTrQuery.php file within the Learning Progress Tracking component. Manipulation of the troup_table_nav argument allows remote attack. The exploit is publicly available.
- CVE-2023-36484Medium
ILIAS versions 7.21 and 8.0_beta1 through 8.2 are vulnerable to reflected Cross-Site Scripting (XSS).
- CVE-2023-36488Medium
ILIAS versions 7.21 and 8.0_beta1 through 8.2 are vulnerable to stored Cross Site Scripting (XSS).