CVE-2022-45151

🗓️ 23 Nov 2022 00:00:00Reported by fedoraType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 318 Views

Moodle stored-XSS vulnerability due to unsanitized user-supplied data. Allows attacker to inject and execute arbitrary HTML and script code in user's browser.

Reporter	Title	Published	Views	Family All 55
BDU FSTEC	Moodle Course Management XSS	24 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-45151	16 Dec 202213:28	–	circl
CNNVD	Moodle cross-site scripting vulnerabilities	23 Nov 202200:00	–	cnnvd
CNVD	Moodle User Profile Field Cross-Site Scripting Vulnerability	25 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-45151	23 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-7467	3 Oct 202520:07	–	euvd
Tenable Nessus	Fedora 37 : moodle (2022-74a9c8e95f)	15 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 35 : moodle (2022-cb7084ae1c)	22 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 36 : moodle (2022-f7fdcb1820)	23 Dec 202200:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-45151	4 Sep 202500:00	–	nessus

NVD

Vulners

Node

moodle moodleRange3.11.0–3.11.11

moodle moodleRange4.0.0–4.0.5

Node

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

[
  {
    "vendor": "n/a",
    "product": "Moodle",
    "versions": [
      {
        "version": "Fixed in moodle 4.0.5, moodle 3.11.11",
        "status": "affected"
      }
    ]
  }
]

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRJB5JNKK3VVBLV3NH3RI7COEDAXSAB/
git	www.git.moodle.org/gw
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74SXNGA5RIWM7QNX7H3G7SYIQLP4UUGV/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

17 Jun 2026 05:09Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.4

EPSS0.00712

SSVC

CWE-79