Description
Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.
Remediation
References
Related Vulnerabilities
Jboss EAP Configuration Vulnerability (CVE-2013-4128)
WordPress Cross-Domain Flash Injection Vulnerability (0.70 - 3.6.1)
WordPress Plugin Zephyr Project Manager Multiple Vulnerabilities (3.2.42)
WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.1.5)
WordPress Plugin Themify-WooCommerce Product Filter SQL Injection (1.4.9)