Description

Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding.

Remediation

References

CVE-2011-4290

Related Vulnerabilities

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2199)

WordPress Plugin NextGEN Gallery-WordPress Gallery 'Gallery Path' Field Cross-Site Scripting (1.9.5)

Magento Improper Input Validation Vulnerability (CVE-2015-6497)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Open Redirect (2.0.33)

WordPress Plugin Mang Board WP Unspecified Vulnerability (2.0.5)

Severity

Medium

Classification

CVE-2011-4290 CWE-707

Tags

Missing Update Known Vulnerabilities