Description
Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2010-2407 Vulnerability (CVE-2010-2407)
WordPress Plugin Stripe Payment for WooCommerce Security Bypass (3.7.7)
WordPress Plugin KN Fix Your Title Cross-Site Scripting (1.0.1)
WordPress Possible SQL Injection Vulnerability (0.70 - 3.6.1)
WordPress Plugin SP Project & Document Manager Unspecified Vulnerability (2.5.7.3)