Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2016-9188 - Vulnerability Database

Moodle

Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2016-9188

Medium

Reference: CVE-2016-9188

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-9188

Title: Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead s_additionalhtmltopofbody and s_additionalhtmlfooter parameters.