CVE-2011-4307

Moodle <2.0.5, <2.1.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.

References (3)

[Patch] http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=41017112cff7f5bd7969c72d321320f3090e7c68

[Vendor Advisory] http://moodle.org/mod/forum/discuss.php?d=188321

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=747444

Scores

EPSS 0.0030

EPSS Percentile 52.7%

Classification

CWE

CWE-79

Status published

Affected Products (8)

moodle/moodle

n/a/n/a

Timeline

Published Jul 11, 2012

Tracked Since Feb 18, 2026