Search for vulnerabilities
| Vulnerability ID | VCID-5kxb-cjhz-fqc7 |
| Aliases |
CVE-2011-4286
GHSA-86v9-gqh9-8268 |
| Summary | Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) Flash Video (aka FLV) files and (2) YouTube videos. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 6.2 |
| Risk | 3.1 |
| Affected and Fixed Packages | Package Details |
| System | Score | Found at |
|---|---|---|
| generic_textual | MODERATE | http://git.moodle.org |
| generic_textual | MODERATE | http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f81bfd412c6b2e93a5b15711727d5cb7cc78336 |
| generic_textual | MODERATE | http://git.moodle.org/gw?p=moodle.git;a=commit;h=8f81bfd412c6b2e93a5b15711727d5cb7cc78336 |
| generic_textual | MODERATE | http://moodle.org/mod/forum/discuss.php?d=170012 |
| generic_textual | MODERATE | http://openwall.com/lists/oss-security/2011/11/14/1 |
| epss | 0.00296 | https://api.first.org/data/v1/epss?cve=CVE-2011-4286 |
| epss | 0.00296 | https://api.first.org/data/v1/epss?cve=CVE-2011-4286 |
| cvssv3.1_qr | MODERATE | https://github.com/advisories/GHSA-86v9-gqh9-8268 |
| generic_textual | MODERATE | https://nvd.nist.gov/vuln/detail/CVE-2011-4286 |
| Percentile | 0.52565 |
| EPSS Score | 0.00296 |
| Published At | June 30, 2025, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2025-07-01T12:30:48.006766+00:00 | GithubOSV Importer | Import | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-86v9-gqh9-8268/GHSA-86v9-gqh9-8268.json | 36.1.3 |