Lucene search
+L

CVE-2024-38274 moodle: stored XSS via calendar's event title when deleting the event

🗓️ 18 Jun 2024 19:49:15Reported by fedoraType 
cvelist
 cvelist
🔗 www.cve.org👁 56 Views

Insufficient calendar event title escaping leading to stored XSS during event deletio

Related
Affected
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
Moodle XSS
8 Sep 202500:00
–bdu_fstec
cnnvd
CNNVD
Moodle 跨站脚本漏洞
18 Jun 202400:00
–cnnvd
cnvd
CNVD
Moodle Cross-Site Scripting Vulnerability (CNVD-2025-11216)
21 Jun 202400:00
–cnvd
cve
CVE
CVE-2024-38274
18 Jun 202419:49
–cve
euvd
EUVD
EUVD-2024-2117
3 Oct 202520:07
–euvd
fedora
Fedora
[SECURITY] Fedora 40 Update: moodle-4.3.5-1.fc40
27 Jun 202402:04
–fedora
fedora
Fedora
[SECURITY] Fedora 39 Update: moodle-4.3.5-1.fc39
27 Jun 202401:43
–fedora
nessus
Tenable Nessus
Fedora 40 : moodle (2024-020937763e)
27 Jun 202400:00
–nessus
nessus
Tenable Nessus
Fedora 39 : moodle (2024-9df8ef935b)
27 Jun 202400:00
–nessus
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2024-38274
5 Sep 202500:00
–nessus
Rows per page
[
  {
    "vendor": "Moodle",
    "product": "Moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.3",
        "lessThanOrEqual": "4.3.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.2",
        "lessThanOrEqual": "4.2.7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "4.1",
        "lessThanOrEqual": "4.1.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Jun 2024 03:06Current
CVSS 3.16.1
EPSS0.00374
SSVC
56