Description

Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Remediation

References

CVE-2004-1424

Related Vulnerabilities

WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Cross-Site Request Forgery (2.4.9)

UAParser.js Inefficient Regular Expression Complexity Vulnerability (CVE-2022-25927)

Django Buffer Access with Incorrect Length Value Vulnerability (CVE-2026-53877)

WordPress Plugin SRS Simple Hits Counter SQL Injection (1.0.4)

WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)

Severity

Medium

Classification

CVE-2004-1424 CWE-707

Tags

Missing Update Known Vulnerabilities