Description
Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424.
Remediation
References
Related Vulnerabilities
WordPress Plugin McAvoy Cross-Site Scripting (0.1.0)
WordPress Plugin Ceceppa Multilingua Unspecified Vulnerability (1.5.3)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Local File Inclusion (4.18.63)
Envoy Proxy Insufficient Session Expiration Vulnerability (CVE-2025-55162)
Oracle Database Server CVE-2019-2776 Vulnerability (CVE-2019-2776)