Candidate: CVE-2011-4306 PublicDate: 2012-07-11 10:26:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4306 Description: Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_moodle: upstream_moodle: needs-triage hardy_moodle: ignored (reached end-of-life) lucid_moodle: ignored (reached end-of-life) maverick_moodle: ignored (reached end-of-life) natty_moodle: ignored (reached end-of-life) oneiric_moodle: ignored (reached end-of-life) precise_moodle: not-affected (1.9.9.dfsg2-4) quantal_moodle: not-affected (1.9.9.dfsg2-4) raring_moodle: not-affected (1.9.9.dfsg2-4) saucy_moodle: not-affected (1.9.9.dfsg2-4) devel_moodle: not-affected (1.9.9.dfsg2-4)