Description
Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin Game Server Status Multiple Vulnerabilities (1.0)
WordPress Plugin WP e-Commerce-Store Toolkit Privilege Escalation (2.0)
WordPress 3.8.x Prototype Pollution (3.8 - 3.8.37)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1507)
WordPress Plugin Contact Form 7 Database Addon-CFDB7 CSV Injection (1.2.5.5)