cve/2024/CVE-2024-33528.md
2024-06-18 02:51:15 +02:00

764 B

CVE-2024-33528

Description

A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with tutor privileges to inject arbitrary web script or HTML via XML file upload.

POC

Reference

Github

No PoCs found on GitHub currently.