Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. The library does not properly filter user input to the quizquestiontostring function in mod/quiz/editlib.php, allowing a malicious user to inject and execute arbitrary HTML script...

Moodle 2.5.x < 2.5.5 Multiple Vulnerabilities

Binary data 9423.prm...