Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task.

Remediation

References

CVE-2014-3550

Related Vulnerabilities

Oracle Database Server CVE-2011-0806 Vulnerability (CVE-2011-0806)

Joomla! Core 1.5.12 Arbitrary File Upload (1.5.12)

WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-14723)

WordPress Plugin WordPress Download Manager Multiple Vulnerabilities (2.9.49)

WebLogic CVE-2018-3201 Vulnerability (CVE-2018-3201)

Severity

Medium

Classification

CVE-2014-3550 CWE-707

Tags

Missing Update Known Vulnerabilities