Description
Cross-site scripting (XSS) vulnerability in cohort/edit_form.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the idnumber field. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2365.
Remediation
References
Related Vulnerabilities
MOVEit Transfer Improper Privilege Management Vulnerability (CVE-2025-2324)
WordPress Plugin Contact Form DB Multiple Cross-Site Scripting Vulnerabilities (2.8.15)
Apache Tomcat Deserialization of Untrusted Data Vulnerability (CVE-2021-25329)