CVE-2013-4523: XSS
Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4523?
CVE-2013-4523 is classified as a medium-severity vulnerability due to its potential for elevating privileges through XSS attacks.
How do I fix CVE-2013-4523?
To fix CVE-2013-4523, update your Moodle installation to version 2.3.10, 2.4.7, 2.5.3, or later.
Who is affected by CVE-2013-4523?
CVE-2013-4523 affects Moodle versions up to 2.2.11, as well as 2.3.x prior to 2.3.10, 2.4.x prior to 2.4.7, and 2.5.x prior to 2.5.3.
What kind of attack does CVE-2013-4523 enable?
CVE-2013-4523 enables cross-site scripting (XSS) attacks, allowing authenticated users to inject arbitrary web scripts or HTML.
What causes CVE-2013-4523?
CVE-2013-4523 is caused by improper input validation in the message/lib.php file within Moodle.