Description

Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.

Remediation

References

CVE-2011-4307

Related Vulnerabilities

MySQL CVE-2022-21427 Vulnerability (CVE-2022-21427)

MySQL CVE-2022-21632 Vulnerability (CVE-2022-21632)

Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2019-10097)

WordPress Plugin WP-Lister Lite for Amazon Directory Traversal (0.9.6.35)

WordPress Plugin WordPress Photo Gallery by Gallery Bank Cross-Site Scripting (3.0.228)

Severity

Medium

Classification

CVE-2011-4307 CWE-707

Tags

Missing Update Known Vulnerabilities