CVE-2014-2571

Moodle is affected by CVE-2014-2571 due to an XSS in quiz_question_tostring in mod/quiz/editlib.php. The vulnerability affects Moodle up to 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allowing remote authenticated users to inject arbitrary script/HTML via a quiz questi...

CVE-2014-2571: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the quizquestiontostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a quiz question...

PT-2014-4784

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.3.11 Moodle versions 2.4.x before 2.4.9 Moodle versions 2.5.x before 2.5.5 Moodle versions 2.6.x before 2.6.2 Description A cross-site scripting XSS issue exists in the quiz question tostring function in...