ja-sig phpcas client library vulnerabilities

Latest ja-sig phpcas client library CVEs

Newest publication first

1. CVE-2010-1618 phpCAS client library and Moodle Cross-site Scripting vulnerability

   Published 2010-04-29

   Medium·CVSS 4.3 EPSS 1.8%

   Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.