CVE-2018-10665: Ilias

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files.

Affected products

• Ilias Ilias: version 5.3.4 only

Published 2018-05-02. Last modified 2026-06-17.