Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/28 8:53 a.m.21 views

BIT-MOODLE-2022-50943 Moodle LMS 4.0 Cross-Site Scripting via course search.php

Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users'...

6.1CVSS6AI score0.00331EPSS
SaveExploits1References5
Rows per page
Query Builder