Lucene search

K
osvGoogleOSV:GHSA-P5CG-6RFR-6MX8
HistoryJun 18, 2024 - 9:30 p.m.

Moodle stored XSS via calendar's event title when deleting the event

2024-06-1821:30:36
Google
osv.dev
5
moodle
stored xss
calendar event
insufficient escaping
software security

AI Score

5.8

Confidence

High

EPSS

0

Percentile

15.7%

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt.

AI Score

5.8

Confidence

High

EPSS

0

Percentile

15.7%