Description
Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14878 Vulnerability (CVE-2020-14878)
e107 Other Vulnerability (CVE-2005-2559)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7317)
WordPress Plugin Images Slideshow by 2J-Image Slider Unspecified Vulnerability (1.2.15)
WordPress Plugin Banner Effect Header Cross-Site Request Forgery (1.2.6)