CVE-2011-4306

Moodle 1.9.x <1.9.14 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

References (3)

Scores

EPSS 0.0030
EPSS Percentile 52.7%

Classification

CWE
CWE-79
Status published

Affected Products (15)

moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle
moodle/moodle < 1.9.14Packagist
n/a/n/a

Timeline

Published Jul 11, 2012
Tracked Since Feb 18, 2026