Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2229)

Description

Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Remediation

References

CVE-2010-2229

Related Vulnerabilities

WordPress Plugin Responsive Lightbox2 Cross-Site Scripting (1.0.2)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5645)

WordPress Plugin Daily Inspiration Generator Cross-Site Scripting (2.0)

WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress SQL Injection (1.1.9)

WordPress Plugin Visitor Traffic Real Time Statistics Security Bypass (2.11)

Severity

Medium

Classification

CVE-2010-2229 CWE-707