Description

Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository.

Remediation

References

CVE-2012-3393

Related Vulnerabilities

WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Request Forgery (6.5.4)

Oracle Database Server CVE-2019-2913 Vulnerability (CVE-2019-2913)

WordPress Plugin Htaccess by BestWebSoft Cross-Site Request Forgery (1.8.1)

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5491)

WordPress Plugin Salon Booking System Cross-Site Request Forgery (3.13.1)

Severity

Low

Classification

CVE-2012-3393 CWE-707

Tags

Missing Update Known Vulnerabilities