CVE-2018-11118

The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php...

CVE-2018-11118

The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php...

CVE-2018-11117

Services/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a link attribute...

CVE-2018-11118

CVE-2018-11118 concerns ILIAS, where the RSS subsystem is vulnerable to cross-site scripting via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php. Affected products are ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5. The underlying issue is an XSS flaw in handling the feed item URI, poten...

PT-2018-10314

Name of the Vulnerable Software and Affected Versions ILIAS versions 5.1.x through 5.3.x before 5.3.5 Description The issue concerns the RSS subsystem, which is affected by a cross-site scripting XSS flaw. This flaw can be exploited via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php...

CVE-2018-11118: Improper Neutralization of Input During Web Page Generation

The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php...

PT-2018-10313

Name of the Vulnerable Software and Affected Versions ILIAS versions 5.1.x through 5.3.x before 5.3.5 Description The issue concerns a problem with the class.ilExternalFeedItem.php file in the Services/Feeds/classes directory. It allows for XSS attacks through a link attribute. Recommendations Fo...

CVE-2018-11117: Improper Neutralization of Input During Web Page Generation

Services/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a link attribute...