Cross-site Scripting (XSS)

moodle/moodle is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient escaping of calendar event titles, leading to a stored XSS risk in the event deletion prompt...

CVE-2024-38274

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

UBUNTU-CVE-2024-38274

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

CVE-2024-38274

The Moodle course management system is vulnerable to a stored Cross-Site Scripting (XSS) risk due to insufficient escaping of calendar event titles. Specifically, the vulnerability occurs when the system fails to properly clean user-provided data in the header of calendar events during the event ...

CVE-2024-38274 moodle: stored XSS via calendar's event title when deleting the event

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

CVE-2024-38274: Improper Neutralization of Input During Web Page Generation

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

PT-2024-27913 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient escaping of calendar event titles, which resulted in a stored XSS risk. This risk is specifically present in the...