Archive
25 March 2008
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium —CVE-2008-1502 EPSS 11%
Moodle vulnerable to Cross-site scripting
The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a st…