Lucene search
PRIOn knowledge basePRION:CVE-2023-23921HistoryFeb 17, 2023 - 8:15 p.m.
Cross site scripting
2023-02-1720:15:00
PRIOn knowledge base
www.prio-n.com
9
moodle
data sanitization
remote attacker
cross-site scripting
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user’s browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks.
Related
osv
osv
CVE-2023-23921
2023-02-17 20:15:11
BIT-moodle-2023-23921
2024-03-06 11:01:25
Moodle Cross-site Scripting vulnerability
2023-02-17 21:30:41
cvelist
cvelist
CVE-2023-23921 Moodle: reflected xss risk in some returnurl parameters
2023-02-17 00:00:00
cve
cve
CVE-2023-23921
2023-02-17 20:15:11
github
github
Moodle Cross-site Scripting vulnerability
2023-02-17 21:30:41
ubuntucve
ubuntucve
CVE-2023-23921
2023-02-17 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2023-02-23 05:16:58
nvd
nvd
CVE-2023-23921
2023-02-17 20:15:11
openvas
openvas
nessus
nessus
Moodle 3.9.x < 3.9.19 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 4.0.x < 4.0.6 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 4.1.x < 4.1.1 Multiple Vulnerabilities
2023-02-20 00:00:00
redos
redos
ROS-20230627-01
2023-06-27 00:00:00