Lucene search

K
osvGoogleOSV:GHSA-XQHH-253W-4Q5F
HistoryMay 31, 2024 - 9:30 p.m.

Moodle Cross-site Scripting (XSS)

2024-05-3121:30:52
Google
osv.dev
9
moodle
cross-site scripting
xss
stored
risk
participant names
table
features
software

AI Score

5.4

Confidence

High

EPSS

0

Percentile

9.0%

Insufficient escaping of participants’ names in the participants page table resulted in a stored XSS risk when interacting with some features.

AI Score

5.4

Confidence

High

EPSS

0

Percentile

9.0%