CVE-2013-4341

MITTEL 4.3CVE-2013-4341 · Published 16/09/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
moodle moodle	`= 2.3.0= 2.3.1= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.3.6= 2.3.7= 2.3.8= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.5.0= 2.5.1≤ 2.2.11`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed.

References

git.moodle.org/gw · Vendor Advisory
packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html · Exploit
moodle.org/mod/forum/discuss.php · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free