CVE-2008-5432

Published: Dec 11, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title).

Affected (40)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Up to 1.6.7
Moodle Moodle	Version 1.1.1
Moodle Moodle	Version 1.2.0
Moodle Moodle	Version 1.2.1
Moodle Moodle	Version 1.3.0
Moodle Moodle	Version 1.3.1
Moodle Moodle	Version 1.3.2
Moodle Moodle	Version 1.3.3
Moodle Moodle	Version 1.3.4
Moodle Moodle	Version 1.4.1
Moodle Moodle	Version 1.4.2
Moodle Moodle	Version 1.4.3
Moodle Moodle	Version 1.4.4
Moodle Moodle	Version 1.4.5
Moodle Moodle	Version 1.5.1
Moodle Moodle	Version 1.5.2
Moodle Moodle	Version 1.5.3
Moodle Moodle	Version 1.5
Moodle Moodle	Version 1.6.0
Moodle Moodle	Version 1.6.1
Moodle Moodle	Version 1.6.3
Moodle Moodle	Version 1.6.4
Moodle Moodle	Version 1.6.5
Moodle Moodle	Version 1.6.6
Moodle Moodle	Version 1.7.0
Moodle Moodle	Version 1.7.1
Moodle Moodle	Version 1.7.2
Moodle Moodle	Version 1.7.3
Moodle Moodle	Version 1.7.4
Moodle Moodle	Version 1.7.5
Moodle Moodle	Version 1.8.0
Moodle Moodle	Version 1.8.1
Moodle Moodle	Version 1.8.2
Moodle Moodle	Version 1.8.3
Moodle Moodle	Version 1.8.4
Moodle Moodle	Version 1.8.5
Moodle Moodle	Version 1.8.6
Moodle Moodle	Version 1.9.0
Moodle Moodle	Version 1.9.1
Moodle Moodle	Version 1.9.2