Description

Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding.

Remediation

References

CVE-2011-4290

Related Vulnerabilities

WordPress Plugin WP Fountain Cross-Site Scripting (1.5.9)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1734)

Oracle Database Server CVE-2012-0528 Vulnerability (CVE-2012-0528)

WordPress 4.1.x Directory Traversal (4.1 - 4.1.40)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7874)

Severity

Medium

Classification

CVE-2011-4290 CWE-707

Tags

Missing Update Known Vulnerabilities