Description

Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.

Remediation

References

CVE-2014-3551

Related Vulnerabilities

WordPress Plugin MF Gig Calendar Cross-Site Scripting (1.1)

Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2021-3177)

WordPress Plugin fitness calculators Cross-Site Request Forgery (1.9.5)

WordPress Plugin Velvet Blues Update URLs Unspecified Vulnerability (2.1)

Piwigo Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2023-44393)

Severity

Low

Classification

CVE-2014-3551 CWE-707

Tags

Missing Update Known Vulnerabilities