Description

Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter.

Remediation

References

CVE-2011-4282

Related Vulnerabilities

WordPress Plugin Google Doc Embedder SQL Injection (2.5.16)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0701)

WordPress Plugin Aesop Story Engine Cross-Site Scripting (1.6)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20149)

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-9240)

Severity

Medium

Classification

CVE-2011-4282 CWE-707

Tags

Missing Update Known Vulnerabilities