Description
Cross-site scripting (XSS) vulnerability in the URL downloader repository in repository/url/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin Booster for WooCommerce Security Bypass (5.4.3)
ownCloud Other Vulnerability (CVE-2012-5057)
Joomla! Core 3.0.x Denial of Service (3.0.0 - 3.0.3)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-32873)
WordPress Plugin WP Symposium Multiple Vulnerabilities (14.10)