Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

CVE-2023-1237

In Moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.

**Moodle Cross-site Scripting vulnerability**

Moderate severity GitHub Reviewed Published Mar 7, 2023 to the GitHub Advisory Database • Updated Mar 8, 2023

GHSA-786g-xv8v-9h93: Moodle Cross-site Scripting vulnerability

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk.

GHSA-79jp-m64f-pgrc: Moodle Cross-site Scripting vulnerability

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.

**Moodle vulnerable to Stored Cross-site Scripting**

Moderate severity GitHub Reviewed Published Mar 7, 2023 to the GitHub Advisory Database • Updated Mar 8, 2023

GHSA-g6h6-4fp6-w33w: Moodle vulnerable to Stored Cross-site Scripting

Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.

CVE-2023-1212

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

*   Date Reported: **October 29, 2019**
    
*   Advisory ID: **WSA-2019-0005**
    
*   CVE identifiers: CVE-2019-8625, CVE-2019-8674, CVE-2019-8707, CVE-2019-8719, CVE-2019-8720, CVE-2019-8726, CVE-2019-8733, CVE-2019-8735, CVE-2019-8763, CVE-2019-8768, CVE-2019-8769, CVE-2019-8771.
    

Several vulnerabilities were discovered in WebKitGTK and WPE WebKit.

*   CVE-2019-8625
    *   Versions affected: WebKitGTK before 2.26.0 and WPE WebKit before 2.26.0.
    *   Credit to Sergei Glazunov of Google Project Zero.
    *   Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Description: A logic issue was addressed with improved state management.
*   CVE-2019-8674
    *   Versions affected: WebKitGTK before 2.24.4 and WPE WebKit before 2.24.3.
    *   Credit to Sergei Glazunov of Google Project Zero.
    *   Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Description: A logic issue was addressed with improved state management.
*   CVE-2019-8707
    *   Versions affected: WebKitGTK before 2.24.4 and WPE WebKit before 2.24.3.
    *   Credit to an anonymous researcher working with Trend Micro’s Zero Day Initiative, cc working with Trend Micro Zero Day Initiative.
    *   Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
*   CVE-2019-8719
    *   Versions affected: WebKitGTK before 2.24.4 and WPE WebKit before 2.24.3.
    *   Credit to Sergei Glazunov of Google Project Zero.
    *   Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Description: A logic issue was addressed with improved state management.
*   CVE-2019-8720
    *   Versions affected: WebKitGTK before 2.26.0 and WPE WebKit before 2.26.0.
    *   Credit to Wen Xu of SSLab at Georgia Tech.
    *   Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
*   CVE-2019-8726
    *   Versions affected: WebKitGTK before 2.24.3 and WPE WebKit before 2.24.3.
    *   Credit to Jihui Lu of Tencent KeenLab.
    *   Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
*   CVE-2019-8733
    *   Versions affected: WebKitGTK before 2.24.4 and WPE WebKit before 2.24.3.
    *   Credit to Sergei Glazunov of Google Project Zero.
    *   Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
*   CVE-2019-8735
    *   Versions affected: WebKitGTK before 2.24.2 and WPE WebKit before 2.24.2.
    *   Credit to G. Geshev working with Trend Micro Zero Day Initiative.
    *   Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
*   CVE-2019-8763
    *   Versions affected: WebKitGTK before 2.24.4 and WPE WebKit before 2.24.3.
    *   Credit to Sergei Glazunov of Google Project Zero.
    *   Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
*   CVE-2019-8768
    *   Versions affected: WebKitGTK before 2.24.0 and WPE WebKit before 2.24.0.
    *   Credit to Hugo S. Diaz (coldpointblue).
    *   Impact: A user may be unable to delete browsing history items. Description: “Clear History and Website Data” did not clear the history. The issue was addressed with improved data deletion.
*   CVE-2019-8769
    *   Versions affected: WebKitGTK before 2.26.0 and WPE WebKit before 2.26.0.
    *   Credit to Piérre Reimertz (@reimertz).
    *   Impact: Visiting a maliciously crafted website may reveal browsing history. Description: An issue existed in the drawing of web page elements. The issue was addressed with improved logic.
*   CVE-2019-8771
    *   Versions affected: WebKitGTK before 2.26.0 and WPE WebKit before 2.26.0.
    *   Credit to Eliya Stein of Confiant.
    *   Impact: Maliciously crafted web content may violate iframe sandboxing policy. Description: This issue was addressed with improved iframe sandbox enforcement.

We recommend updating to the latest stable versions of WebKitGTK and WPE WebKit. It is the best way to ensure that you are running safe versions of WebKit. Please check our websites for information about the latest stable releases.

Further information about WebKitGTK and WPE WebKit security advisories can be found at: https://webkitgtk.org/security.html or https://wpewebkit.org/security/.

CVE-2019-8720: WebKitGTK and WPE WebKit Security Advisory WSA-2019-0005

QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.

CVE-2022-42248

Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function _fnCreateCookie. NOTE: 1.9.2 is a version from 2012.

/\*\* \* @summary DataTables \* @description Paginate, search and sort HTML tables \* @version 1.9.2 \* @file jquery.dataTables.js \* @author Allan Jardine (www.sprymedia.co.uk) \* @contact www.sprymedia.co.uk/contact \* \* @copyright Copyright 2008-2012 Allan Jardine, all rights reserved. \* \* This source file is free software, under either the GPL v2 license or a \* BSD style license, available at: \* http://datatables.net/license\_gpl2 \* http://datatables.net/license\_bsd \* \* This source file is distributed in the hope that it will be useful, but \* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY \* or FITNESS FOR A PARTICULAR PURPOSE. See the license files for details. \* \* For details please refer to: http://www.datatables.net \*/ /\*jslint evil: true, undef: true, browser: true \*/ /\*globals $, jQuery,\_fnExternApiFunc,\_fnInitialise,\_fnInitComplete,\_fnLanguageCompat,\_fnAddColumn,\_fnColumnOptions,\_fnAddData,\_fnCreateTr,\_fnGatherData,\_fnBuildHead,\_fnDrawHead,\_fnDraw,\_fnReDraw,\_fnAjaxUpdate,\_fnAjaxParameters,\_fnAjaxUpdateDraw,\_fnServerParams,\_fnAddOptionsHtml,\_fnFeatureHtmlTable,\_fnScrollDraw,\_fnAdjustColumnSizing,\_fnFeatureHtmlFilter,\_fnFilterComplete,\_fnFilterCustom,\_fnFilterColumn,\_fnFilter,\_fnBuildSearchArray,\_fnBuildSearchRow,\_fnFilterCreateSearch,\_fnDataToSearch,\_fnSort,\_fnSortAttachListener,\_fnSortingClasses,\_fnFeatureHtmlPaginate,\_fnPageChange,\_fnFeatureHtmlInfo,\_fnUpdateInfo,\_fnFeatureHtmlLength,\_fnFeatureHtmlProcessing,\_fnProcessingDisplay,\_fnVisibleToColumnIndex,\_fnColumnIndexToVisible,\_fnNodeToDataIndex,\_fnVisbleColumns,\_fnCalculateEnd,\_fnConvertToWidth,\_fnCalculateColumnWidths,\_fnScrollingWidthAdjust,\_fnGetWidestNode,\_fnGetMaxLenString,\_fnStringToCss,\_fnDetectType,\_fnSettingsFromNode,\_fnGetDataMaster,\_fnGetTrNodes,\_fnGetTdNodes,\_fnEscapeRegex,\_fnDeleteIndex,\_fnReOrderIndex,\_fnColumnOrdering,\_fnLog,\_fnClearTable,\_fnSaveState,\_fnLoadState,\_fnCreateCookie,\_fnReadCookie,\_fnDetectHeader,\_fnGetUniqueThs,\_fnScrollBarWidth,\_fnApplyToChildren,\_fnMap,\_fnGetRowData,\_fnGetCellData,\_fnSetCellData,\_fnGetObjectDataFn,\_fnSetObjectDataFn,\_fnApplyColumnDefs,\_fnBindAction,\_fnCallbackReg,\_fnCallbackFire,\_fnJsonString,\_fnRender,\_fnNodeToColumnIndex,\_fnInfoMacros\*/ (/\*\* @lends \*/function($, window, document, undefined) { /\*\* \* DataTables is a plug-in for the jQuery Javascript library. It is a \* highly flexible tool, based upon the foundations of progressive \* enhancement, which will add advanced interaction controls to any \* HTML table. For a full list of features please refer to \* DataTables.net. \* \* Note that the _DataTable_ object is not a global variable but is \* aliased to _jQuery.fn.DataTable_ and _jQuery.fn.dataTable_ through which \* it may be accessed. \* \* @class \* @param {object} \[oInit={}\] Configuration object for DataTables. Options \* are defined by {@link DataTable.defaults} \* @requires jQuery 1.3+ \* \* @example \* // Basic initialisation \* $(document).ready( function { \* $('#example').dataTable(); \* } ); \* \* @example \* // Initialisation with configuration options - in this case, disable \* // pagination and sorting. \* $(document).ready( function { \* $('#example').dataTable( { \* "bPaginate": false, \* "bSort": false \* } ); \* } ); \*/ var DataTable = function( oInit ) { /\*\* \* Add a column to the list used for the table with default values \* @param {object} oSettings dataTables settings object \* @param {node} nTh The th element for this column \* @memberof DataTable#oApi \*/ function \_fnAddColumn( oSettings, nTh ) { var oDefaults = DataTable.defaults.columns; var iCol = oSettings.aoColumns.length; var oCol = $.extend( {}, DataTable.models.oColumn, oDefaults, { "sSortingClass": oSettings.oClasses.sSortable, "sSortingClassJUI": oSettings.oClasses.sSortJUI, "nTh": nTh ? nTh : document.createElement('th'), "sTitle": oDefaults.sTitle ? oDefaults.sTitle : nTh ? nTh.innerHTML : '', "aDataSort": oDefaults.aDataSort ? oDefaults.aDataSort : \[iCol\], "mDataProp": oDefaults.mDataProp ? oDefaults.oDefaults : iCol } ); oSettings.aoColumns.push( oCol ); /\* Add a column specific filter \*/ if ( oSettings.aoPreSearchCols\[ iCol \] === undefined || oSettings.aoPreSearchCols\[ iCol \] === null ) { oSettings.aoPreSearchCols\[ iCol \] = $.extend( {}, DataTable.models.oSearch ); } else { var oPre = oSettings.aoPreSearchCols\[ iCol \]; /\* Don't require that the user must specify bRegex, bSmart or bCaseInsensitive \*/ if ( oPre.bRegex === undefined ) { oPre.bRegex = true; } if ( oPre.bSmart === undefined ) { oPre.bSmart = true; } if ( oPre.bCaseInsensitive === undefined ) { oPre.bCaseInsensitive = true; } } /\* Use the column options function to initialise classes etc \*/ \_fnColumnOptions( oSettings, iCol, null ); } /\*\* \* Apply options for a column \* @param {object} oSettings dataTables settings object \* @param {int} iCol column index to consider \* @param {object} oOptions object with sType, bVisible and bSearchable \* @memberof DataTable#oApi \*/ function \_fnColumnOptions( oSettings, iCol, oOptions ) { var oCol = oSettings.aoColumns\[ iCol \]; /\* User specified column options \*/ if ( oOptions !== undefined && oOptions !== null ) { if ( oOptions.sType !== undefined ) { oCol.sType = oOptions.sType; oCol.\_bAutoType = false; } $.extend( oCol, oOptions ); \_fnMap( oCol, oOptions, "sWidth", "sWidthOrig" ); /\* iDataSort to be applied (backwards compatibility), but aDataSort will take \* priority if defined \*/ if ( oOptions.iDataSort !== undefined ) { oCol.aDataSort = \[ oOptions.iDataSort \]; } \_fnMap( oCol, oOptions, "aDataSort" ); } /\* Cache the data get and set functions for speed \*/ oCol.fnGetData = \_fnGetObjectDataFn( oCol.mDataProp ); oCol.fnSetData = \_fnSetObjectDataFn( oCol.mDataProp ); /\* Feature sorting overrides column specific when off \*/ if ( !oSettings.oFeatures.bSort ) { oCol.bSortable = false; } /\* Check that the class assignment is correct for sorting \*/ if ( !oCol.bSortable || ($.inArray('asc', oCol.asSorting) == -1 && $.inArray('desc', oCol.asSorting) == -1) ) { oCol.sSortingClass = oSettings.oClasses.sSortableNone; oCol.sSortingClassJUI = ""; } else if ( oCol.bSortable || ($.inArray('asc', oCol.asSorting) == -1 && $.inArray('desc', oCol.asSorting) == -1) ) { oCol.sSortingClass = oSettings.oClasses.sSortable; oCol.sSortingClassJUI = oSettings.oClasses.sSortJUI; } else if ( $.inArray('asc', oCol.asSorting) != -1 && $.inArray('desc', oCol.asSorting) == -1 ) { oCol.sSortingClass = oSettings.oClasses.sSortableAsc; oCol.sSortingClassJUI = oSettings.oClasses.sSortJUIAscAllowed; } else if ( $.inArray('asc', oCol.asSorting) == -1 && $.inArray('desc', oCol.asSorting) != -1 ) { oCol.sSortingClass = oSettings.oClasses.sSortableDesc; oCol.sSortingClassJUI = oSettings.oClasses.sSortJUIDescAllowed; } } /\*\* \* Adjust the table column widths for new data. Note: you would probably want to \* do a redraw after calling this function! \* @param {object} oSettings dataTables settings object \* @memberof DataTable#oApi \*/ function \_fnAdjustColumnSizing ( oSettings ) { /\* Not interested in doing column width calculation if autowidth is disabled \*/ if ( oSettings.oFeatures.bAutoWidth === false ) { return false; } \_fnCalculateColumnWidths( oSettings ); for ( var i=0 , iLen=oSettings.aoColumns.length ; i

CVE-2021-36713

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.

Tag

#xss