Description

Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.

Remediation

References

CVE-2011-4307

Related Vulnerabilities

Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-32679)

WordPress Plugin Spreadsheet Cross-Site Scripting (2.0)

LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3752)

WordPress Plugin WordPress Gallery-NextGEN Gallery Cross-Site Request Forgery (3.28)

Plone CMS Resource Management Errors Vulnerability (CVE-2012-5499)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-4307