Description

Cross-site scripting (XSS) vulnerability in the print_object function in lib/datalib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3, when a developer debugging script is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors involving object states.

Remediation

References

CVE-2011-4591

Related Vulnerabilities

Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-8163)

Oracle JRE CVE-2019-2987 Vulnerability (CVE-2019-2987)

IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-29844)

WordPress Plugin Simple Contact Info Arbitrary File Deletion (1.1.9)

WordPress Plugin Network Publisher 'networkpub_key' Parameter Cross-Site Scripting (5.0.1)

Severity

Medium

Classification

CVE-2011-4591 CWE-707

Tags

Missing Update Known Vulnerabilities