CVE-2024-33998

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...

CVE-2024-33998

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...

CVE-2024-33998 moodle: stored XSS via user's name on participants page when opening some options

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...

CVE-2024-33998 moodle: stored XSS via user's name on participants page when opening some options

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features...

CVE-2024-33998

The CVE-2024-33998 entry describes a stored XSS risk in Moodle caused by insufficient escaping of participants’ names on the participants page table. Reported effects occur when interacting with some features, and multiple connected documents (OSV/GHSA and related Nessus notes) confirm the XSS na...