Description

Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php.

Remediation

References

CVE-2012-2365

Related Vulnerabilities

WordPress Plugin FireStats Multiple Cross-Site Scripting and Authentication Bypass Vulnerabilities (1.0.2)

Joomla Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-23755)

OpenSSL Other Vulnerability (CVE-2003-0544)

Apache HTTP Server Other Vulnerability (CVE-1999-0926)

Oracle JRE CVE-2024-20926 Vulnerability (CVE-2024-20926)

Severity

Low

Classification

CVE-2012-2365 CWE-707

Tags

Missing Update Known Vulnerabilities