Description

mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document.

Remediation

References

CVE-2013-2243

Related Vulnerabilities

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4033)

Masa CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-42183)

Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-4671)

WordPress Plugin BuddyPress Global Search Cross-Site Scripting (1.1.0)

MySQL CVE-2016-0646 Vulnerability (CVE-2016-0646)

Severity

Medium

Classification

CVE-2013-2243 CWE-200

Tags

Missing Update Known Vulnerabilities