Unscored CVE-2002-2386 EUVD-2002-2364GHSA-73xc-5c3p-98hg

Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attac…

Published Oct 31, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag.

References

http://www.blocus-zone.com/modules/news/article.php?storyid=180
20021110 xoops Quizz Module IMG bug mailing-list
xoops-quiz-module-xss(10594) vdb-entry