CVE-2010-2230

The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.

• CWE-79

• http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114&r2=1.812.2.115Patch
• http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171&r2=1.970.2.172Patch
• http://docs.moodle.org/en/Moodle_1.8.13_release_notes
• http://docs.moodle.org/en/Moodle_1.9.9_release_notes
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
• http://moodle.org/mod/forum/discuss.php?d=152368
• http://secunia.com/advisories/40248Vendor Advisory
• http://secunia.com/advisories/40352Vendor Advisory
• http://tracker.moodle.org/browse/MDL-22042
• http://www.openwall.com/lists/oss-security/2010/06/21/2
• http://www.vupen.com/english/advisories/2010/1530Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1571Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=605809
• http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114&r2=1.812.2.115Patch
• http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171&r2=1.970.2.172Patch
• http://docs.moodle.org/en/Moodle_1.8.13_release_notes
• http://docs.moodle.org/en/Moodle_1.9.9_release_notes
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
• http://moodle.org/mod/forum/discuss.php?d=152368
• http://secunia.com/advisories/40248Vendor Advisory
• http://secunia.com/advisories/40352Vendor Advisory
• http://tracker.moodle.org/browse/MDL-22042
• http://www.openwall.com/lists/oss-security/2010/06/21/2
• http://www.vupen.com/english/advisories/2010/1530Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1571Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=605809

Published

Jun 28, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2224The snapshot merging functionality in Red Hat Enterprise Vir…
• CVE-2010-2225Use-after-free vulnerability in the SplObjectStorage unseria…
• CVE-2010-2226The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux …
• CVE-2010-2227Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, an…
• CVE-2010-2228Cross-site scripting (XSS) vulnerability in the MNET access-…
• CVE-2010-2229Multiple cross-site scripting (XSS) vulnerabilities in blog/…
• CVE-2010-2231Cross-site request forgery (CSRF) vulnerability in report/ov…
• CVE-2010-2232In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, …
• CVE-2010-2233tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platform…
• CVE-2010-2234Cross-site request forgery (CSRF) vulnerability in Apache Co…
• CVE-2010-2235template_api.py in Cobbler before 2.0.7, as used in Red Hat …
• CVE-2010-2236The monitoring probe display in spacewalk-java before 2.1.14…