Vulnerabilities > Ilias > Ilias > 5.3.4
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-05-17 | CVE-2018-11120 | Cross-site Scripting vulnerability in Ilias Services/COPage/classes/class.ilPCSourceCode.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS. | 4.3 |
| 2018-05-17 | CVE-2018-11119 | Open Redirect vulnerability in Ilias ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter. | 5.8 |
| 2018-05-17 | CVE-2018-11118 | Cross-site Scripting vulnerability in Ilias The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php. | 4.3 |
| 2018-05-17 | CVE-2018-11117 | Cross-site Scripting vulnerability in Ilias Services/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a link attribute. | 4.3 |
| 2018-05-02 | CVE-2018-10665 | Cross-site Scripting vulnerability in Ilias 5.3.4 ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files. | 4.3 |