Description

Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2011-4280

Related Vulnerabilities

WordPress Plugin Securimage-WP Cross-Site Scripting (3.2.4)

WordPress Plugin EZ Portfolio Multiple Cross-Site Scripting Vulnerabilities (1.0.1)

Oracle Database Server CVE-2012-0082 Vulnerability (CVE-2012-0082)

Oracle JRE CVE-2012-0502 Vulnerability (CVE-2012-0502)

WordPress Plugin WP Fastest Cache Multiple Vulnerabilities (0.8.5.8)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-4280