Description

Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter.

Remediation

References

CVE-2011-4282

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1521)

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2978)

WordPress Plugin Showbiz Pro Responsive Teaser Arbitrary File Upload (1.7.1)

Oracle JRE CVE-2014-0456 Vulnerability (CVE-2014-0456)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7851)

Severity

Medium

Classification

CVE-2011-4282 CWE-707

Tags

Missing Update Known Vulnerabilities