https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:31:51 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-228 CERTFR-2015-AVI-228 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-228 https://vulnerability.circl.lu/vuln/bdu:2015-10891 bdu:2015-10891 https://vulnerability.circl.lu/vuln/bdu:2015-10891 https://vulnerability.circl.lu/vuln/cnvd-2015-03654 cnvd-2015-03654 https://vulnerability.circl.lu/vuln/cnvd-2015-03654 https://vulnerability.circl.lu/vuln/fkie_cve-2015-3178 <p>Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.</p> <p>Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2015-3178 https://vulnerability.circl.lu/vuln/ghsa-9fmw-m4qx-6cq8 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.</p> https://vulnerability.circl.lu/vuln/ghsa-9fmw-m4qx-6cq8 https://vulnerability.circl.lu/vuln/gsd-2015-3178 gsd-2015-3178 https://vulnerability.circl.lu/vuln/gsd-2015-3178 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-3178 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle</p> <p>Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle</p> <p>Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-3178