Description
Cross-site scripting (XSS) vulnerability in the URL downloader repository in repository/url/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin AIT Themes-CSV Import/Export Arbitrary File Upload (3.0.3)
MyBB Improper Input Validation Vulnerability (CVE-2008-4930)
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-68436)
WordPress Plugin Realia Cross-Site Scripting (0.9.1)
Moodle Incorrect Default Permissions Vulnerability (CVE-2024-45690)