CVE-2007-4717

no score yetEPSS 3.1%

claroline claroline: no CVSS score yet. EPSS 3.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) dir parameter in admin/adminusers.php, the (2) action parameter in admin/advancedUserSearch.php, and the (3) view parameter in admin/campusProblem.php.

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2007-09-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

claroline:claroline

References

http://osvdb.org/38925
http://osvdb.org/38926
http://osvdb.org/38927
http://secunia.com/advisories/26685
http://www.claroline.net/forum/viewtopic.php?t=13448

Check your stack JSON