Description

Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.

Remediation

References

CVE-2011-4307

Related Vulnerabilities

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43732)

WordPress Plugin Site Reviews Cross-Site Scripting (5.17.2)

Oracle Database Server CVE-2010-2412 Vulnerability (CVE-2010-2412)

MyBB Improper Access Control Vulnerability (CVE-2016-9413)

Internet Information Services Other Vulnerability (CVE-1999-0448)

Severity

Medium

Classification

CVE-2011-4307 CWE-707

Tags

Missing Update Known Vulnerabilities