Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string.

Moodle, an open-source course management system, installed on the remote host is version 2.8.x prior to 2.8.10, or 2.9.x prior to 2.9.4, or 3.0.x prior to 3.0.2, and is affected by a flaw that allows a cross-site scripting (XSS) attack.  This flaw exists because the '/moodle/course/management.php' script does not validate the 'search' parameter before returning it to users.  This may allow a remote attacker to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.

Security update.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Marina Glancy reports :

- MSA-16-0001: Two enrolment-related web services don't check course visibility

- MSA-16-0002: XSS Vulnerability in course management search

ID	Name	Product	Family	Severity
9192	Moodle 2.8.x < 2.8.10 / 2.9.x < 2.9.4 / 3.0.x < 3.0.2 XSS	Nessus Network Monitor	CGI	medium
89645	Fedora 22 : moodle-2.8.10-1.fc22 (2016-fb2597f4eb)	Nessus	Fedora Local Security Checks	medium
89489	Fedora 23 : moodle-2.9.4-1.fc23 (2016-1c10ab3c35)	Nessus	Fedora Local Security Checks	medium
89007	FreeBSD : moodle -- multiple vulnerabilities (2d299950-ddb0-11e5-8fa8-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2016-0725

medium

Tenable Plugins

medium

medium

medium

medium