Description

mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document.

Remediation

References

CVE-2013-2243

Related Vulnerabilities

Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12308)

Moodle Incorrect Authorization Vulnerability (CVE-2020-25701)

WordPress 5.1.x PHP Object Injection (5.1 - 5.1.9)

Oracle Database Server Other Vulnerability (CVE-2001-1041)

WordPress Plugin Coupon Creator Cross-Site Request Forgery (3.1)

Severity

Medium

Classification

CVE-2013-2243 CWE-200

Tags

Missing Update Known Vulnerabilities