CVE-2011-4306: XSS

Q: What is the severity of CVE-2011-4306?

CVE-2011-4306 is classified as a high-severity vulnerability due to its potential for remote code execution through XSS.

Q: How do I fix CVE-2011-4306?

To remediate CVE-2011-4306, upgrade Moodle to version 1.9.14 or later.

Q: Who is affected by CVE-2011-4306?

CVE-2011-4306 affects all versions of Moodle 1.9.x prior to 1.9.14.

Q: What kind of vulnerability is CVE-2011-4306?

CVE-2011-4306 is a Cross-Site Scripting (XSS) vulnerability that allows authenticated users to inject arbitrary scripts.

Q: When was CVE-2011-4306 disclosed?

CVE-2011-4306 was disclosed in 2011.

Published Jul 11, 2012

Updated

Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

Other sources

Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

Affected Software

14 affected componentsFixes available

composer/moodle/moodle<1.9.14

1.9.14

Moodle moodle=1.9.1

Moodle moodle=1.9.2

Moodle moodle=1.9.3

Moodle moodle=1.9.4

Moodle moodle=1.9.5

Moodle moodle=1.9.6

Moodle moodle=1.9.7

Moodle moodle=1.9.8

Moodle moodle=1.9.9

Moodle moodle=1.9.10

Moodle moodle=1.9.11

Moodle moodle=1.9.12

Moodle moodle=1.9.13

Event History

Jul 11, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

May 13, 2022

Advisory Published

via GitHub·01:13 AM

Frequently Asked Questions

What is the severity of CVE-2011-4306?

CVE-2011-4306 is classified as a high-severity vulnerability due to its potential for remote code execution through XSS.

How do I fix CVE-2011-4306?