Lucene search
PRIOn knowledge basePRION:CVE-2013-4753HistoryDec 26, 2014 - 11:59 p.m.
Cross site scripting
2014-12-2623:59:00
PRIOn knowledge base
www.prio-n.com
1
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field in an inbox action to messaging/messagebox.php, (2) the “First name” field to auth/profile.php, or (3) the Speakers field in an rqAdd action to calendar/agenda.php.
References
Related
cve
cve
CVE-2013-4753
2014-12-26 23:59:00
nvd
nvd
CVE-2013-4753
2014-12-26 23:59:00
cvelist
cvelist
CVE-2013-4753
2014-12-26 23:00:00