CVE-2011-4290: XSS
Published Jul 16, 2012
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding.
Affected Software
11 affected components
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Event History
Jul 16, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4290?
CVE-2011-4290 is rated as moderate severity due to its potential impact from cross-site scripting (XSS) attacks.
2
How do I fix CVE-2011-4290?
To fix CVE-2011-4290, update Moodle to version 1.9.12 or later, which includes patches for these vulnerabilities.
3
Which versions of Moodle are affected by CVE-2011-4290?
CVE-2011-4290 affects Moodle versions 1.9.x prior to 1.9.12.
4
What type of attack does CVE-2011-4290 allow?
CVE-2011-4290 allows remote attackers to perform cross-site scripting (XSS) attacks via URL encoding vulnerabilities.
5
Is there a way to mitigate the risks of CVE-2011-4290 if I can't update immediately?
If you cannot update immediately, consider implementing web application firewalls or input validation to reduce exposure to potential exploits.