Description

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.

Remediation

References

CVE-2013-4941

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4306)

WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.1.9)

Squid Uncontrolled Resource Consumption Vulnerability (CVE-2021-46784)

WordPress Plugin WPFront User Role Editor Unspecified Vulnerability (2.14.1)

Internet Information Services Unchecked Return Value Vulnerability (CVE-2005-4360)

Severity

Medium

Classification

CVE-2013-4941 CWE-707

Tags

Missing Update Known Vulnerabilities