Description

Cross-site scripting (XSS) vulnerability in mod/quiz/report/statistics/statistics_question_table.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the student role for a crafted quiz response.

Remediation

References

CVE-2015-2273

Related Vulnerabilities

WordPress Plugin WP No External Links Cross-Site Scripting (3.5.18)

MongoDb Integer Overflow or Wraparound Vulnerability (CVE-2019-2392)

WordPress Plugin PAYPAL CURRENCY CONVERTER BASIC FOR WOOCOMMERCE Arbitrary File Disclosure (1.3)

WordPress Plugin Votecount for Balatarin Cross-Site Scripting (0.1.1)

MySQL CVE-2012-0119 Vulnerability (CVE-2012-0119)

Severity

Low

Classification

CVE-2015-2273 CWE-707

Tags

Missing Update Known Vulnerabilities