Description

Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424.

Remediation

References

CVE-2007-3555

Related Vulnerabilities

WordPress 4.4 Cross-Site Scripting Vulnerability (4.4)

YetiForce CRM Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-0269)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14547)

WordPress Plugin Twitget Cross-Site Request Forgery (3.3.2)

WordPress Plugin RSS Redirect & Feedburner Alternative Unspecified Vulnerability (1.9)

Severity

Medium

Classification

CVE-2007-3555

Tags

Missing Update Known Vulnerabilities