CVE-2024-33998

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...

CVE-2024-33998

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...

CVE-2024-33998

The Moodle virtual learning environment is vulnerable to stored Cross-site Scripting (XSS) due to the insufficient escaping of participants' names in the participants page table. This flaw allows for malicious code injection when interacting with specific features. Impacted versions include Moodl...

CVE-2024-33998 moodle: stored XSS via user's name on participants page when opening some options

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...

CVE-2024-33998 moodle: stored XSS via user's name on participants page when opening some options

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...