GHSA-mx5g-3vxh-rgm8Medium

Moodle vulnerable to XSS via bundled spikephpcoverage library

Published
May 13, 2022
Last Modified
January 17, 2024

🔗 CVE IDs covered (1)

CVE-2011-4280 →

📋 Description

Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products1

  • composer/moodle/moodle:>= 2.0, < 2.0.2

🔗 References (6)