Cross-site Scripting (XSS)

moodle/moodle is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient escaping of calendar event titles, leading to a stored XSS risk in the event deletion prompt...

CVE-2024-38274

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

UBUNTU-CVE-2024-38274

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

CVE-2024-38274

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

CVE-2024-38274 moodle: stored XSS via calendar's event title when deleting the event

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...

CVE-2024-38274

The Moodle virtual learning environment is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-38274 ) caused by the insufficient escaping or cleaning of user-provided data in the calendar event titles . Specifically, the issue manifests when an event is being deleted, where t...

PT-2024-27913

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to insufficient escaping of calendar event titles, which resulted in a stored XSS risk. This risk is specifically present in the even...

CVE-2024-38274: Improper Neutralization of Input During Web Page Generation

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt...