CVE-2024-33997

Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation...

CVE-2024-33997

Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation...

CVE-2024-33997 moodle: stored XSS risk when editing another user's equation in equation editor

Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation...

CVE-2024-33997

The Moodle virtual learning environment is vulnerable to a stored Cross-site Scripting (XSS) risk. The root cause is insufficient sanitization when opening the equation editor , specifically when a user attempts to edit another user's equation. This vulnerability affects versions prior to 4.1.10 ...