Description
Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.
Remediation
References
Related Vulnerabilities
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2017-7525)
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2018-16651)
Apache Tomcat Insufficient Verification of Data Authenticity Vulnerability (CVE-2017-7674)
WordPress Plugin WP Plugin Info Card Unspecified Vulnerability (2.3.6)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4300)