Description
Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php.
Remediation
References
Related Vulnerabilities
PrestaShop Files or Directories Accessible to External Parties Vulnerability (CVE-2020-5250)
WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.3)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2432)
MySQL CVE-2018-3070 Vulnerability (CVE-2018-3070)
Moodle Improper Input Validation Vulnerability (CVE-2011-4582)