CVE-2011-4299: XSS
Published Jul 11, 2012
·Updated
Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment.
Affected Software
9 affected componentsFixes available
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.1.0
Moodle moodle=2.1.1
composer/moodle/moodle>=2.1.0<2.1.2
2.1.2
composer/moodle/moodle>=2.0.0<2.0.5
2.0.5
Remediation
Patch Available
Event History
Jul 11, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:26 AM
RemedyDescriptionSeverityWeaknessAffected Software
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4299?
CVE-2011-4299 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2011-4299?
The vulnerability CVE-2011-4299 can be mitigated by upgrading to Moodle version 2.0.5 or 2.1.2 or later.
3
What versions of Moodle are affected by CVE-2011-4299?
CVE-2011-4299 affects Moodle versions 2.0.0 through 2.0.4 and 2.1.0 through 2.1.1.
4
What type of attack can be executed using CVE-2011-4299?
CVE-2011-4299 allows remote authenticated users to perform cross-site scripting (XSS) attacks through wiki comments.
5
Who is vulnerable to CVE-2011-4299?
Remote authenticated users of affected Moodle versions are vulnerable to exploitation of CVE-2011-4299.