Description
Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.
Remediation
References
Related Vulnerabilities
Drupal Core 6.x Multiple Security Bypass Vulnerabilities (6.0 - 6.4)
MySQL CVE-2021-2193 Vulnerability (CVE-2021-2193)
WordPress Plugin BulletProof Security Cross-Site Scripting (.52.4)
WordPress Plugin Yoast SEO Cross-Site Scripting (21.0)
WordPress Plugin Filedownload 'download.php' Local File Disclosure (0.1)