CVE-2011-4307

Moodle 2.0.x-2.0.5 and 2.1.x-2.1.2 - Cross-Site Scripting via Section Parameter

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.

References (3)

Core 3

Core References

Patch x_refsource_confirm

http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=41017112cff7f5bd7969c72d321320f3090e7c68

Vendor Advisory x_refsource_confirm

http://moodle.org/mod/forum/discuss.php?d=188321

Issue Tracking x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=747444

Scores

EPSS 0.0030

EPSS Percentile 53.1%

Details

CWE

CWE-79

Status published

Products (7)

moodle/moodle 2.0.0

moodle/moodle 2.0.1

moodle/moodle 2.0.2

moodle/moodle 2.0.3

moodle/moodle 2.0.4

moodle/moodle 2.1.0

moodle/moodle 2.1.1

Published Jul 11, 2012

Tracked Since Feb 18, 2026