296,322
Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the (1) mailing or (2) forum component, as demonstrated using the style and onmouseover HTML attributes.
| Software | From | Fixed in |
|---|---|---|
| ilias / ilias | - | 3.8.3.x |
| ilias / ilias | 3.8.2 | 3.8.2.x |
| ilias / ilias | 3.8.1 | 3.8.1.x |
| ilias / ilias | 3.8 | 3.8.x |