XSS in Moodle
CVE-2011-4280
Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.
Affected products
- Moodle — versions 2.0.0, 2.0.1
- Nimish_pachapurkar Spike_phpcoverage
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)