Candidate: CVE-2011-4299 PublicDate: 2012-07-11 10:26:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4299 Description: Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment. Ubuntu-Description: Notes: jdstrand> moodle 2.0 only Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_moodle: upstream_moodle: needs-triage hardy_moodle: ignored (reached end-of-life) lucid_moodle: not-affected maverick_moodle: not-affected natty_moodle: not-affected oneiric_moodle: not-affected devel_moodle: not-affected (1.9.9.dfsg2-4)