Description

Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.

Remediation

References

CVE-2015-3275

Related Vulnerabilities

WordPress Plugin Gallery-Video Gallery and Youtube Gallery SQL Injection (2.0.9)

WordPress 2.1.1 Command Execution Backdoor Vulnerability (2.1.1)

WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (5.8.0)

Frontaccounting Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-5720)

GlassFish Use of Hard-coded Credentials Vulnerability (CVE-2018-14324)

Severity

Medium

Classification

CVE-2015-3275 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities