Description

lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI.

Remediation

References

CVE-2012-6102

Related Vulnerabilities

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.30)

WordPress Plugin SAML SP Single Sign On-SSO login Cross-Site Scripting (4.8.83)

WordPress Plugin Facebook, Twitter & Google+ Social Widgets Multiple Vulnerabilities (1.3.7)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.11)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21370)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2012-6102