https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 05:26:31 +0000 https://vulnerability.circl.lu/vuln/CERTA-2008-AVI-527 CERTA-2008-AVI-527 https://vulnerability.circl.lu/vuln/CERTA-2008-AVI-527 https://vulnerability.circl.lu/vuln/fkie_cve-2008-1502 <p>The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.</p> <p>The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2008-1502 https://vulnerability.circl.lu/vuln/ghsa-v759-3wr5-p294 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>The `_bad_protocol_once` function in `phpgwapi/inc/class.kses.inc.php` in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>The `_bad_protocol_once` function in `phpgwapi/inc/class.kses.inc.php` in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.</p> https://vulnerability.circl.lu/vuln/ghsa-v759-3wr5-p294 https://vulnerability.circl.lu/vuln/gsd-2008-1502 gsd-2008-1502 https://vulnerability.circl.lu/vuln/gsd-2008-1502