CVE-2016-9188

4.3

MEDIUMCVSS v2

Published

November 4, 2016

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters.

moodle/moodle

GitHubMoodle - the world's open source learning platform

<= 3.1.2, >= 2.0.1, <= 3.2.1NVD

moodle

NPMModel module for node for use with both mongodb and mysql.

<= 3.1.2NVD

moodle

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Moodle web services connection library

<= 3.1.2NVD

moodle

RubyGemsInteract with Moodle from ruby

<= 3.1.2NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

<= 3.1.2NVD

Security Advisories

CVE-2016-9188

Description

More on this CVE