CVE-2018-11118

MEDIUM 6.1CVE-2018-11118 · Published 17/05/2018 · updated 17/06/2026

In short

CVE-2018-11118 is a MEDIUM (CVSS 6.1) vulnerability affecting ilias (ilias).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ilias ilias	`= 5.1.0= 5.2.0≥ 5.1.0, ≤ 5.1.26≥ 5.2.0, ≤ 5.2.15≥ 5.3.0, ≤ 5.3.4`	No fix yet

The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 5.1.0= 5.2.0≥ 5.1.0, ≤ 5.1.26≥ 5.2.0, ≤ 5.2.15≥ 5.3.0, ≤ 5.3.4

No fix yet

More vulnerabilities in ilias

See all →