CVE-2013-5706

Published: Sep 6, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to error messages and (1) crafted event attributes or (2) > (greater than) characters that are optional within a browser's HTML implementation, a different issue than CVE-2013-3603.

Affected (1)

Products: Trivantis: Coursemill Learning Management System

1 product

Coursemill Learning Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Trivantis Coursemill Learning Management System	Version 6.8

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

http://www.kb.cert.org/vuls/id/960908

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/960908

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.