Services/COPage/classes/class.ilPCSourceCode.php in ILIAS 5.1.x, 5.2.x, and 5.3.x prior to 5.3.5 has XSS.
ilias ilias
ilias ilias 5.1.0
ilias ilias 5.2.0