Lucene search

K
cveMitreCVE-2024-33528
HistoryMay 21, 2024 - 3:15 p.m.

CVE-2024-33528

2024-05-2115:15:29
mitre
web.nvd.nist.gov
42
cve-2024-33528
remote authenticated attackers
tutor privileges
arbitrary web script

AI Score

5.4

Confidence

High

A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with tutor privileges to inject arbitrary web script or HTML via XML file upload.

AI Score

5.4

Confidence

High

Related for CVE-2024-33528