Lucene search
MitreCVELIST:CVE-2024-33526HistoryMay 23, 2024 - 4:41 p.m.
CVE-2024-33526
2024-05-2316:41:36
mitre
raw.githubusercontent.com
32
stored xss
ilias 7
ilias 8
remote attackers
arbitrary web script
html
xml file upload
5.5 Medium
AI Score
Confidence
High
A Stored Cross-site Scripting (XSS) vulnerability in the “Import of user role and title of user role” feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload.
