{"id":"CVE-2023-36488","details":"ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to stored Cross Site Scripting (XSS).","modified":"2026-08-12T03:51:40.187846337Z","published":"2023-06-29T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36488.json","unresolved_ranges":[{"extracted_events":[{"introduced":"8.0_beta1"},{"fixed":"8.2"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141704&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI"},{"type":"WEB","url":"https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36488.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36488"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ilias-elearning/ilias","events":[{"introduced":"8ae8387e9d7f958cf88a9dd37fd542195a473dd1"},{"last_affected":"bce87f5e94931a09e31e375f8523a858a9a25bb0"},{"introduced":"c95bd654f986f13717e265e4e20029425752ca4f"},{"last_affected":"c95bd654f986f13717e265e4e20029425752ca4f"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*","cpe:2.3:a:ilias:ilias:7.21:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.2"},{"introduced":"7.21"},{"last_affected":"7.21"}]}}],"versions":["7.21","v7.21"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36488.json"}}],"schema_version":"1.9.0"}