Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3393)

Description

Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository.

Remediation

References

CVE-2012-3393

Related Vulnerabilities

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3636)

WordPress Plugin Media File Manager Advanced Multiple Vulnerabilities (1.1.5)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.33)

WordPress 5.1.x Prototype Pollution (5.1 - 5.1.12)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12629)

Severity

Low

Classification

CVE-2012-3393 CWE-707