Description
Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.
References
- 20040806 xss in moodle (post.php) mailing-list
- 10884 vdb-entry
- 12262 third-party-advisory
- moodle-post-xss(16924) vdb-entry