Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Jun 28, 2010 |
| Suse | — | Upgrade moodle-ptUpgrade moodle-tlUpgrade moodle-frUpgrade moodle-esUpgrade moodle-daUpgrade moodle-hrUpgrade moodleUpgrade moodle-csUpgrade moodle-arUpgrade moodle-jaUpgrade moodle-ukUpgrade moodle-skUpgrade moodle-kaUpgrade moodle-fiUpgrade moodle-srUpgrade moodle-kmUpgrade moodle-plUpgrade moodle-nnUpgrade moodle-viUpgrade moodle-lvUpgrade moodle-beUpgrade moodle-afUpgrade moodle-ruUpgrade moodle-etUpgrade moodle-thUpgrade moodle-bgUpgrade moodle-bsUpgrade moodle-de_duUpgrade moodle-roUpgrade moodle-elUpgrade moodle-idUpgrade moodle-huUpgrade moodle-zh_cnUpgrade moodle-knUpgrade moodle-ltUpgrade moodle-msUpgrade moodle-soUpgrade moodle-svUpgrade moodle-caUpgrade moodle-slUpgrade moodle-sqUpgrade moodle-hiUpgrade moodle-gaUpgrade moodle-itUpgrade moodle-koUpgrade moodle-noUpgrade moodle-glUpgrade moodle-mi_tnUpgrade moodle-isUpgrade moodle-heUpgrade moodle-faUpgrade moodle-trUpgrade moodle-nlUpgrade moodle-deUpgrade moodle-eu | Feb 17, 2015 | Jun 28, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub