CVE-2020-25267

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.