Description

Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.

Remediation

References

CVE-2010-1618

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6634)

Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-0434)

WordPress Plugin User Meta Manager Multiple Vulnerabilities (3.4.6)

WordPress Plugin Shortcode for Font Awesome Cross-Site Scripting (1.4)

WordPress Plugin Easy Panorama Cross-Site Scripting (1.1.4)

Severity

Medium

Classification

CVE-2010-1618 CWE-707

Tags

Missing Update Known Vulnerabilities