Description
Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Clean Up & Optimizer-Clean Up Optimizer SQL Injection (3.0.13)
PHP Other Vulnerability (CVE-2005-3391)
Java Unspesificed Vulnerability (CVE-2018-2941)
WordPress Plugin PhotoSmash Galleries 'action' Parameter Cross-Site Scripting (1.0.2)
Play Framework Uncontrolled Recursion Vulnerability (CVE-2020-26883)