Search for vulnerabilities
Vulnerability details: VCID-k7c7-e45x-3yg4
Vulnerability ID VCID-k7c7-e45x-3yg4
Aliases CVE-2010-1619
GHSA-hhxf-w8hj-43w6
Summary Moodle vulnerable to Cross-site Scripting Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library (weblib.php), as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities.
Status Published
Exploitability 0.5
Weighted Severity 2.7
Risk 1.4
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual LOW http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
generic_textual LOW http://moodle.org/security
epss 0.00254 https://api.first.org/data/v1/epss?cve=CVE-2010-1619
epss 0.00254 https://api.first.org/data/v1/epss?cve=CVE-2010-1619
cvssv3.1_qr LOW https://github.com/advisories/GHSA-hhxf-w8hj-43w6
generic_textual LOW https://github.com/moodle/moodle
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2010-1619
generic_textual LOW http://www.vupen.com/english/advisories/2010/1107
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
http://moodle.org/security
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1619.json
https://api.first.org/data/v1/epss?cve=CVE-2010-1619
https://github.com/moodle/moodle
https://nvd.nist.gov/vuln/detail/CVE-2010-1619
http://www.vupen.com/english/advisories/2010/1107
578811 https://bugzilla.redhat.com/show_bug.cgi?id=578811
585425 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585425
GHSA-hhxf-w8hj-43w6 https://github.com/advisories/GHSA-hhxf-w8hj-43w6
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.487
EPSS Score 0.00254
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:30:39.003942+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-hhxf-w8hj-43w6/GHSA-hhxf-w8hj-43w6.json 36.1.3