Description
Cross-site scripting (XSS) vulnerability in the quiz_question_tostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a quiz question.
Remediation
References
Related Vulnerabilities
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
PHP Other Vulnerability (CVE-2014-4698)
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-48008)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2022-23302)
WordPress Plugin iThemes Security (formerly Better WP Security) Multiple Vulnerabilities (3.6.3)