Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Claroline Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2013-4753 - Vulnerability Database
Claroline

Claroline Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2013-4753

Low
Reference: CVE-2013-4753
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-4753
Title: Claroline Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field in an inbox action to messaging/messagebox.php (2) the quotFirst namequot field to auth/profile.php or (3) the Speakers field in an rqAdd action to calendar/agenda.php.