Description

Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question.

Remediation

References

CVE-2013-4525

Related Vulnerabilities

Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0909)

WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (32.0.5)

WordPress Plugin Video Embed & Thumbnail Generator Information Disclosure (1.1)

WordPress Plugin DB Toolkit 'uploadify.php' Arbitrary File Upload (0.1.10)

WordPress Plugin Project Supremacy V3 Lite Cross-Site Scripting (1.1)

Severity

Low

Classification

CVE-2013-4525 CWE-707

Tags

Missing Update Known Vulnerabilities