CVE-2015-3275

Description

Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.

References

https://moodle.org/mod/forum/discuss.php?d=316665

http://www.securitytracker.com/id/1032877

http://openwall.com/lists/oss-security/2015/07/13/2

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50614

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3