CVE-2024-33528

The ILIAS learning management system is affected by a Stored Cross-site Scripting (XSS) vulnerability in versions 7.0.0 through 7.29 and 8.0.0 through 8.10 . The root cause is the improper neutralization of input during the XML file upload process, which allows remote authenticated attackers with...