CVE-2007-4717: Claroline

Low severity, CVSS 3.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) dir parameter in admin/adminusers.php, the (2) action parameter in admin/advancedUserSearch.php, and the (3) view parameter in admin/campusProblem.php.

Affected products

• Claroline Claroline: up to and including 1.8.5

Published 2007-09-05. Last modified 2026-06-16.