https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T18:06:00.572121+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2017-15538 CVE-2017-15538 2026-09-30T18:06:00.589013+00:00

Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php.