Description

Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.

Remediation

References

CVE-2010-1618

Related Vulnerabilities

WordPress Plugin Cookie Information-Free GDPR Consent Solution Security Bypass (2.0.22)

WordPress Plugin Really Simple Gallery Multiple Vulnerabilities (1.4)

Zope Web Application Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2012-5507)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-22462)

WordPress Plugin Global Flash Galleries Cross-Site Scripting (0.13.4)

Severity

Medium

Classification

CVE-2010-1618 CWE-707

Tags

Missing Update Known Vulnerabilities