Description

Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.

Remediation

References

CVE-2004-1978

Related Vulnerabilities

EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-38843)

WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Server-Side Request Forgery (4.4.7)

WordPress Plugin YOP Poll Cross-Site Scripting (6.1.4)

MongoDb Integer Overflow or Wraparound Vulnerability (CVE-2019-2392)

WebLogic Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-27568)

Severity

Medium

Classification

CVE-2004-1978

Tags

Missing Update Known Vulnerabilities