Description

Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.

Remediation

References

CVE-2013-2244

Related Vulnerabilities

WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting (5.9.0)

Oracle Database Server CVE-2011-3512 Vulnerability (CVE-2011-3512)

WordPress Plugin Lightbox Plus Colorbox Cross-Site Scripting (2.7.2)

Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2339)

WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (2.1.77)

Severity

Medium

Classification

CVE-2013-2244 CWE-707

Tags

Missing Update Known Vulnerabilities