Description

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.

Remediation

References

CVE-2017-2576

Related Vulnerabilities

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-39324)

WordPress Plugin External Links-nofollow, noopener & new window Cross-Site Scripting (2.55)

WordPress Plugin MailPoet Newsletters (Previous) Security Bypass (2.8.1)

WordPress Plugin Photo Gallery-Image Gallery by Ape Security Bypass (2.0.6)

Nexus Repository Manager Improper Authentication Vulnerability (CVE-2019-9629)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2017-2576