Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3547)

Description

Multiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via an external badge.

Remediation

References

CVE-2014-3547

Related Vulnerabilities

WordPress Plugin WP fail2ban Security Bypass (4.0.2)

MySQL CVE-2015-4910 Vulnerability (CVE-2015-4910)

Moodle Configuration Vulnerability (CVE-2012-3392)

WordPress Plugin WordPress InviteBox for viral Refer-a-Friend Promotions Cross-Site Scripting (1.4.1)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9031)

Severity

Medium

Classification

CVE-2014-3547 CWE-707