CVE-2013-2244
Moodle 2.4.x < 2.4.5 and 2.5.x < 2.5.1 - Cross-Site Scripting via Conditional Access Rule Value
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.
References (2)
Core 2
Core References
Patch x_refsource_confirm
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37516
Vendor Advisory x_refsource_confirm
https://moodle.org/mod/forum/discuss.php?d=232501
Scores
EPSS
0.0026
EPSS Percentile
49.7%
Details
CWE
CWE-79
Status
published
Products (6)
moodle/moodle
2.4.0
moodle/moodle
2.4.1
moodle/moodle
2.4.2
moodle/moodle
2.4.3
moodle/moodle
2.4.4
moodle/moodle
2.5.0
Published
Jul 29, 2013
Tracked Since
Feb 18, 2026