Description
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including (1) calendar/myagenda.php, (2) document/document.php, (3) phpbb/newtopic.php, (4) tracking/userLog.php, and (5) wiki/page.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin Haiku minimalist audio player Cross-Site Scripting (1.0.0)
Oracle JRE CVE-2013-2414 Vulnerability (CVE-2013-2414)
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)
Joomla! Core 3.x.x Information Disclosure (3.7.0 - 3.8.1)
Oracle Database Server CVE-2014-6467 Vulnerability (CVE-2014-6467)