Description
Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.
Remediation
References
Related Vulnerabilities
WordPress Plugin ThemeGrill Demo Importer Security Bypass (1.6.1)
WordPress Plugin Raygun4WP Cross-Site Scripting (1.8.2)
WordPress Plugin FormBuilder Cross-Site Scripting (0.90)
WordPress Plugin Custom Field Suite Cross-Site Request Forgery (2.5.15)
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Scripting (3.4.8.2)