CVE-2010-2230

Published Jun 28, 2010 CVSS 2.0 · 4.0 Medium EPSS 2.2% KEV · Not listed
Description
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2115-1 New moodle packages fix several vulnerabilities
Debian DSA Debian DSA DSA-2115-2 New moodle packages fix several vulnerabilities
EUVD EUVD EUVD-2022-2179 The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.
Github GHSA Github GHSA GHSA-3gm8-32vv-q8mp Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 2:25 AM
Reserved
Jun 9, 2010, 12:00 AM
Status
Modified
Published
Jun 28, 2010, 5:30 PM
Modified
Jun 16, 2026, 11:20 PM