CVE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

CVE-2024-34000

The Moodle platform is affected by a stored XSS vulnerability where ID numbers displayed in the lesson overview report lack sufficient sanitizing. This flaw allows for potential script execution in the context of the user's browser. The vulnerability impacts Moodle versions prior to 4.1.10 , 4.2....

CVE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...