CVE-2007-4717

LOW 3.5CVE-2007-4717 · Published 05/09/2007 · updated 16/06/2026

In short

CVE-2007-4717 is a LOW (CVSS 3.5) vulnerability affecting claroline (claroline).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
claroline claroline	`≤ 1.8.5`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) dir parameter in admin/adminusers.php, the (2) action parameter in admin/advancedUserSearch.php, and the (3) view parameter in admin/campusProblem.php.

References

More vulnerabilities in claroline

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

claroline

≤ 1.8.5

No fix yet

Description

More vulnerabilities in claroline

See all →