EUVD-2022-6443

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Stored XSS and blind SSRF vulnerability in Moodle allows remote attackers to execute arbitrary scripts.

Reporter	Title	Published	Views	Family All 60
ATTACKERKB	CVE-2022-35651	25 Jul 202216:15	–	attackerkb
Circl	CVE-2022-35651	25 Jul 202220:33	–	circl
CNNVD	Moodle 跨站脚本漏洞	19 Jul 202200:00	–	cnnvd
CNVD	Moodle Input Validation Error Vulnerability (CNVD-2022-54916)	21 Jul 202200:00	–	cnvd
CVE	CVE-2022-35651	25 Jul 202215:30	–	cve
Cvelist	CVE-2022-35651	25 Jul 202215:30	–	cvelist
Fedora	[SECURITY] Fedora 36 Update: moodle-3.11.8-1.fc36	27 Jul 202202:24	–	fedora
Fedora	[SECURITY] Fedora 35 Update: moodle-3.11.8-1.fc35	27 Jul 202202:35	–	fedora
Github Security Blog	Moodle Stored XSS and blind SSRF possible via SCORM track details	26 Jul 202200:00	–	github
NVD	CVE-2022-35651	25 Jul 202216:15	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "67c63523-69cf-36ad-ae1e-65472721f315",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-35651
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/moodle/moodle
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V
moodle	www.moodle.org/mod/forum/discuss.php
git	www.git.moodle.org/gw
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/

03 Oct 2025 20:07Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.16.1

EPSS0.00281