{"id":"CVE-2018-11118","details":"The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php.","modified":"2026-07-08T05:52:09.826864543Z","published":"2018-05-17T13:29:00.350Z","database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"ilias:ilias","cpes":["cpe:2.3:a:ilias:ilias:5.2.0:beta2:*:*:*:*:*:*","cpe:2.3:a:ilias:ilias:5.2.0:beta3:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.2.0-beta2"},{"last_affected":"5.2.0-beta2"},{"introduced":"5.2.0-beta3"},{"last_affected":"5.2.0-beta3"}]}]},"references":[{"type":"ADVISORY","url":"https://www.ilias.de/docu/goto.php?target=st_229"},{"type":"FIX","url":"https://github.com/ILIAS-eLearning/ILIAS/commit/6b2217c31b6974788a5c787413454475687b44bb"},{"type":"FIX","url":"https://github.com/ILIAS-eLearning/ILIAS/commit/d0dcad1b1e729f694acd0582bc626c7c8e62b519"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ilias-elearning/ilias","events":[{"introduced":"1a4b8f71a3b4f5f753d847fa87258a214baeef06"},{"last_affected":"ba288e35eed9075df6088e216cfe370675b6b2a9"},{"introduced":"b5e252d75801c5c0d47c40e773e502eb78f136bf"},{"last_affected":"c98fb5a727163f9416127a5e26c89c8eaa54dc0b"},{"introduced":"a3f852a420235507d7cbe57d0e6c485667ab31cb"},{"last_affected":"aad29de0e53aaa23980fa34f4c4f37a1182e04a2"},{"introduced":"1b17dca537848333034e07adcbb506fc611ddef6"},{"last_affected":"fcda3f98c5edadbd79216c44656df5f3002991bf"},{"fixed":"6b2217c31b6974788a5c787413454475687b44bb"},{"fixed":"d0dcad1b1e729f694acd0582bc626c7c8e62b519"}],"database_specific":{"cpe":["cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*","cpe:2.3:a:ilias:ilias:5.1.0:beta1:*:*:*:*:*:*","cpe:2.3:a:ilias:ilias:5.2.0:beta1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.1.0"},{"last_affected":"5.1.26"},{"introduced":"5.2.0"},{"last_affected":"5.2.15"},{"introduced":"5.3.0"},{"last_affected":"5.3.4"},{"introduced":"5.1.0-beta1"},{"last_affected":"5.1.0-beta1"},{"introduced":"5.2.0-beta1"},{"last_affected":"5.2.0-beta1"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["5.1.0-beta1","5.2.0-beta1","v5.1.26","v5.2.15","v5.1.25","v5.2.14","v5.2.13","v5.1.23","v5.1.22","v5.1.21","v5.2.7","v5.2.5","v5.1.0","v5.1.18","v5.1.17","v5.2.0","v5.1.14","v5.1.13","v5.1.10","v5.1.9","v5.1.8","v5.1.6","v5.1.5","v5.1.2","v5.1.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11118.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}