Lucene search

K
osvGoogleOSV:GHSA-VVH5-7V3M-J3MJ
HistoryMay 31, 2024 - 9:30 p.m.

Moodle Unsanitized HTML in site log for config_log_created

2024-05-3121:30:55
Google
osv.dev
1
moodle
site log
event descriptions
html encoding
plaintext
software

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%