VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 26, 2014· Updated Jun 16, 2026

CVE-2013-4753

CVE-2013-4753

Description

Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field in an inbox action to messaging/messagebox.php, (2) the "First name" field to auth/profile.php, or (3) the Speakers field in an rqAdd action to calendar/agenda.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Claroline/Claroline2 versions
    cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*range: <=1.11.9
    • (no CPE)range: <=1.11.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.