← All advisories

Medium severity5.4NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026

CVE-2020-25267

CVE-2020-25267

Description

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.

Affected products

3

Ilias/Ilias2 versions
cpe:2.3:a:ilias:ilias:6.4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ilias:ilias:6.4.0:*:*:*:*:*:*:*
- (no CPE)range: 6.4
ILIAS/ILIASdescription

Patches

Vulnerability mechanics

References

1

medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.