CVE-2010-1619

UNKNOWN

Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library (weblib.php), as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities

Published Apr 29, 2010

Modified 2 years ago

Details

Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library (weblib.php), as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

WEB

http://moodle.org/security/

WEB

http://www.vupen.com/english/advisories/2010/1107

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2010-1619

CVSS Analysis

CVSS v2.0

4.3