Lucene search

K
nvd[email protected]NVD:CVE-2024-33528
HistoryMay 21, 2024 - 3:15 p.m.

CVE-2024-33528

2024-05-2115:15:29
web.nvd.nist.gov
5
stored cross-site scripting
ilias
remote authenticated attackers
tutor privileges
xml file upload

AI Score

5.2

Confidence

High

A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with tutor privileges to inject arbitrary web script or HTML via XML file upload.

AI Score

5.2

Confidence

High

Related for NVD:CVE-2024-33528