Cross-Site Scripting in yui

Affected versions of yui are vulnerable to cross-site scripting in the uploader.swf and io.swf utilities, via script injection in the url. Recommendation YUI has published their recommendation to fix this issue. Their recommendation is to: - Delete self-hosted copies of these files if you are not...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the io.swf component of Yahoo! YUI used within Moodle...