Description

Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via an assignment submission with zip compression, leading to text/html rendering during a "download all" action.

Remediation

References

CVE-2012-2364

Related Vulnerabilities

WordPress Plugin Order Export & Order Import for WooCommerce Cross-Site Request Forgery (1.6.0)

WordPress Plugin Top Quark Architecture 'script.php' Arbitrary File Upload (2.1.0)

WordPress Plugin Interactive Geo Maps Cross-Site Scripting (1.5.10)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21729)

MySQL CVE-2022-21368 Vulnerability (CVE-2022-21368)

Severity

Low

Classification

CVE-2012-2364 CWE-707

Tags

Missing Update Known Vulnerabilities