CVE-2018-10428: Ilias

Medium severity, CVSS 6.1. EPSS: 1.9% chance of exploitation in the next 30 days.

ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting.

Affected products

• Ilias Ilias: before 5.1.26 (fixed in 5.1.26); from 5.2.0, before 5.2.15 (fixed in 5.2.15); from 5.3.0, before 5.3.4 (fixed in 5.3.4)

Published 2018-05-23. Last modified 2026-06-17.