Description

Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php.

Remediation

References

CVE-2006-4941

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4748)

WordPress Plugin Gantry 5 Framework Cross-Site Scripting (5.4.8)

WordPress Plugin Add Product Tabs for WooCommerce Security Bypass (1.4.2)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder SQL Injection (1.13.3)

Atlassian Jira Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-20408)

Severity

Medium

Classification

CVE-2006-4941

Tags

Missing Update Known Vulnerabilities