GHSA-64r3-582j-frqm
Suggest an improvement- Source
- https://github.com/advisories/GHSA-64r3-582j-frqm
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-64r3-582j-frqm/GHSA-64r3-582j-frqm.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-64r3-582j-frqm
- Aliases
-
- CVE-2013-4941
- Published
- 2022-05-13T01:12:54Z
- Modified
- 2025-04-12T03:42:16.961697Z
- Severity
-
- 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N CVSS Calculator
- Summary
- YUI Cross-site Scripting (XSS) vulnerability
- Details
-
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.
- Database specific
{ "nvd_published_at": "2013-07-29T13:59:00Z", "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2025-04-12T03:25:17Z" }- References
Affected packages
npm / yui
Package
- Name
- yui
- View open source insights on deps.dev
- Purl
- pkg:npm/yui
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle