CVE-2024-37674

2024-06-2018:15:12

[email protected]

web.nvd.nist.gov

moodle cms

cross site scripting

remote code execution

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity.

References

moodle.com

github.com/MohamedAzizMSALLEMI/Moodle_Security/blob/main/CVE-2024-37674.md