CVE-2015-2273 | BDVDB-2026-69681 Detail

Description#

Cross-site scripting (XSS) vulnerability in mod/quiz/report/statistics/statistics_question_table.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the student role for a crafted quiz response.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49364
https://moodle.org/mod/forum/discuss.php?d=307387
http://openwall.com/lists/oss-security/2015/03/16/1

Exploit#

No public exploit known

History#

Version 12015-06-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.