CVE-2012-2360: XSS
First published: Sat Jul 21 2012(Updated: )
Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle | =2.0.0 | |
| Moodle | =2.0.1 | |
| Moodle | =2.0.2 | |
| Moodle | =2.0.3 | |
| Moodle | =2.0.4 | |
| Moodle | =2.0.5 | |
| Moodle | =2.0.6 | |
| Moodle | =2.0.7 | |
| Moodle | =2.0.8 | |
| Moodle | =2.1.0 | |
| Moodle | =2.1.1 | |
| Moodle | =2.1.2 | |
| Moodle | =2.1.3 | |
| Moodle | =2.1.4 | |
| Moodle | =2.1.5 | |
| Moodle | =2.2.0 | |
| Moodle | =2.2.1 | |
| Moodle | =2.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-2360?
CVE-2012-2360 is classified as a high severity vulnerability due to the potential for remote users to inject arbitrary scripts.
How do I fix CVE-2012-2360?
To fix CVE-2012-2360, upgrade Moodle to versions 2.0.9, 2.1.6, or 2.2.3 or later.
Who is affected by CVE-2012-2360?
CVE-2012-2360 affects Moodle versions 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3.
What types of attacks are possible with CVE-2012-2360?
CVE-2012-2360 allows attackers to perform Cross-site scripting (XSS) attacks by injecting malicious scripts into page titles.
Is CVE-2012-2360 a client-side or server-side vulnerability?
CVE-2012-2360 is primarily a client-side vulnerability, enabling attackers to exploit vulnerabilities in users' web browsers.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/moodle
- canonical/moodle
- version/moodle/2.0.0
- version/moodle/2.0.1
- version/moodle/2.0.2
- version/moodle/2.0.3
- version/moodle/2.0.4
- version/moodle/2.0.5
- version/moodle/2.0.6
- version/moodle/2.0.7
- version/moodle/2.0.8
- version/moodle/2.1.0
- version/moodle/2.1.1
- version/moodle/2.1.2
- version/moodle/2.1.3
- version/moodle/2.1.4
- version/moodle/2.1.5
- version/moodle/2.2.0
- version/moodle/2.2.1
- version/moodle/2.2.2