First published: Thu Apr 29 2010(Updated: )
Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library (weblib.php), as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Moodle Moodle | =1.9.4 | |
Moodle Moodle | =1.9.1 | |
Moodle Moodle | =1.8.8 | |
Moodle Moodle | =1.9.6 | |
Moodle Moodle | =1.8.2 | |
Moodle Moodle | =1.9.2 | |
Moodle Moodle | =1.8.6 | |
Moodle Moodle | =1.8.5 | |
Moodle Moodle | =1.8.3 | |
Moodle Moodle | =1.8.9 | |
Moodle Moodle | =1.8.7 | |
Moodle Moodle | =1.8.10 | |
Moodle Moodle | =1.9.3 | |
Moodle Moodle | =1.9.5 | |
Moodle Moodle | =1.8.11 | |
Moodle Moodle | =1.8.4 | |
Moodle Moodle | =1.8.1 | |
Moodle Moodle | =1.9.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.