CVE-2011-4280

medium

Description

Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

https://github.com/advisories/GHSA-mx5g-3vxh-rgm8

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4646

http://openwall.com/lists/oss-security/2011/11/14/1

http://moodle.org/mod/forum/discuss.php?d=170005

http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=bd654f0ced8af925c27b7c94321f0c299b50b38e

Details

Source: Mitre, NVD

Published: 2012-07-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N