Description

Multiple cross-site scripting (XSS) vulnerabilities in mod/lti/typessettings.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) lti_typename or (2) lti_toolurl parameter.

Remediation

References

CVE-2012-3389

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6125)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0714)

Joomla Other Vulnerability (CVE-2023-23752)

WordPress Plugin Click to Chat Cross-Site Scripting (1.6)

Apache Tomcat Other Vulnerability (CVE-2006-7195)

Severity

Medium

Classification

CVE-2012-3389 CWE-707

Tags

Missing Update Known Vulnerabilities