What is GHSA-h6px-pvfh-q2jv?

GHSA-h6px-pvfh-q2jv is a security advisory published by GitHub Security Advisories with Low severity. Moodle vulnerable to Cross-Site Scripting

Which CVE IDs does GHSA-h6px-pvfh-q2jv cover?

GHSA-h6px-pvfh-q2jv covers the following CVE IDs: CVE-2011-4299. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-h6px-pvfh-q2jv?

GHSA-h6px-pvfh-q2jv affects 2 products, including: composer/moodle/moodle:\u003e= 2.0.0, \u003c 2.0.5; composer/moodle/moodle:\u003e= 2.1.0, \u003c 2.1.2.

GHSA-h6px-pvfh-q2jvLow

Moodle vulnerable to Cross-Site Scripting

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2011-4299 →

📋 Description

Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment.

🎯 Affected products2

composer/moodle/moodle:>= 2.0.0, < 2.0.5
composer/moodle/moodle:>= 2.1.0, < 2.1.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2011-4299
https://bugzilla.redhat.com/show_bug.cgi?id=747444
http://git.moodle.org/gw?p=moodle.git;a=commit;h=a459fd90625ae44d7b3ac10b65da2dc631a418e7
http://moodle.org/mod/forum/discuss.php?d=188310
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7
https://github.com/advisories/GHSA-h6px-pvfh-q2jv