CVE-2020-25267

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...

“File-Upload-with-Preview” cross-site scripting vulnerability

file-upload-with-preview is a simple file upload utility that displays a preview of an uploaded image. Written in pure JavaScript. No dependencies. Works with Bootstrap 4 or without frameworks. A cross-site scripting vulnerability exists in file-upload-with-preview, which can be exploited to uplo...

CVE-2020-25267: Improper Neutralization of Input During Web Page Generation

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4...

PT-2020-16051

Name of the Vulnerable Software and Affected Versions ILIAS version 6.4 Description An XSS issue exists in the question-pool file-upload preview feature. This allows for potential exploitation through malicious file uploads. Recommendations For ILIAS version 6.4, update to a version that includes...