CVE-2010-1619: XSS
Published Apr 29, 2010
·Updated
Cross-site scripting (XSS) vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library (weblib.php), as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities.
Affected Software
20 affected componentsFixes available
Moodle moodle=1.9.4
Moodle moodle=1.9.1
Moodle moodle=1.8.8
Moodle moodle=1.9.6
Moodle moodle=1.8.2
Moodle moodle=1.9.2
Moodle moodle=1.8.6
Moodle moodle=1.8.5
Moodle moodle=1.8.3
Moodle moodle=1.8.9
Moodle moodle=1.8.7
Moodle moodle=1.8.10
Moodle moodle=1.9.3
Moodle moodle=1.9.5
Moodle moodle=1.8.11
Moodle moodle=1.8.4
Moodle moodle=1.8.1
Moodle moodle=1.9.7
composer/moodle/moodle>=1.9.0<1.9.8
1.9.8
composer/moodle/moodle>=1.8.0<1.8.12
1.8.12
Event History
Apr 29, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Data Sourced
via GitHub·01:13 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1619?
CVE-2010-1619 is classified as a moderate severity vulnerability due to the potential for remote exploitation via cross-site scripting.
2
How do I fix CVE-2010-1619?
To fix CVE-2010-1619, upgrade Moodle to versions 1.8.12 or 1.9.8 or later.
3
What software is affected by CVE-2010-1619?
CVE-2010-1619 affects Moodle versions 1.8.x before 1.8.12 and 1.9.x before 1.9.8.
4
What type of vulnerability is CVE-2010-1619?
CVE-2010-1619 is a cross-site scripting (XSS) vulnerability.
5
What can attackers do with CVE-2010-1619?
Attackers can exploit CVE-2010-1619 to inject arbitrary web scripts or HTML into affected Moodle systems.