CVE-2013-4525
N/A
Published: November 26, 2013 at 02:00 AM UTC
Updated: June 16, 2026 at 11:57 PM UTC
1 product affected across 1 vendorMoodle
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1.0%
Description
Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 2.2.111.1.11.2.01.2.11.3.01.3.11.3.21.3.31.3.41.4.11.4.21.4.31.4.41.4.51.51.5.0 beta1.5.11.5.21.5.31.6.01.6.11.6.21.6.31.6.41.6.51.6.61.6.71.6.81.7.11.7.21.7.31.7.41.7.51.7.61.8.11.8.101.8.111.8.121.8.131.8.141.8.21.8.31.8.41.8.51.8.61.8.71.8.81.8.91.9.11.9.101.9.111.9.121.9.131.9.141.9.151.9.161.9.171.9.181.9.21.9.31.9.41.9.51.9.61.9.71.9.81.9.92.0.02.0.12.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.1.02.1.12.1.102.1.22.1.32.1.42.1.52.1.62.1.72.1.82.1.92.2.02.2.12.2.102.2.22.2.32.2.42.2.52.2.62.2.72.2.82.2.92.3.02.3.12.3.22.3.32.3.42.3.52.3.62.3.72.3.82.3.92.4.02.4.12.4.22.4.32.4.42.4.52.4.62.5.02.5.12.5.2
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (3)
x_refsource_CONFIRMExploitPatch
Source: [email protected]
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-41820Mailing Listx_refsource_MLIST
Source: [email protected]
http://openwall.com/lists/oss-security/2013/11/25/1x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://moodle.org/mod/forum/discuss.php?d=244482Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card