Description

Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php.

Remediation

References

CVE-2012-2365

Related Vulnerabilities

Nginx Heap-based Buffer Overflow Vulnerability (CVE-2026-42533)

Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2018-14478)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38264)

Liferay Portal Observable Timing Discrepancy Vulnerability (CVE-2025-43754)

LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4628)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-2365