Description

Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.

Remediation

References

CVE-2015-3178

Related Vulnerabilities

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Request Forgery (2.10.2)

Oracle Database Server CVE-2010-0853 Vulnerability (CVE-2010-0853)

WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.5.3)

WordPress Plugin OAuth Single Sign On-SSO (OAuth Client) Multiple Cross-Site Request Forgery Vulnerabilities (6.24.1)

Joomla Improper Input Validation Vulnerability (CVE-2021-26029)

Severity

Low

Classification

CVE-2015-3178 CWE-707

Tags

Missing Update Known Vulnerabilities