Description
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) index.php, (2) demo/claroline170/index.php, and possibly other scripts.
Remediation
References
Related Vulnerabilities
Ruby on Rails Improper Input Validation Vulnerability (CVE-2011-3187)
OpenSSL Other Vulnerability (CVE-2014-3569)
WordPress Plugin WebLibrarian Multiple Unspecified Vulnerabilities (2.6.3.1)
WordPress Plugin Simply Instagram Cross-Site Scripting (1.2.6)
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-45445)