GHSA-MX26-62XM-2P83 Moodle vulnerable to site administration SQL injection via XMLDB editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

SQL Injection

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to SQL Injection through the XMLDB editor tool. An attacker with administrative privileges can manipulate database queries and potentially access or modify data without proper authorization by injectin...

CVE-2024-43436

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

UBUNTU-CVE-2024-43436

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

CVE-2024-43436

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

CVE-2024-43436 Moodle: site administration sql injection via xmldb editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

CVE-2024-43436 Moodle: site administration sql injection via xmldb editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

CVE-2024-43436

CVE-2024-43436 affects Moodle and is caused by a SQL injection risk in the XMLDB editor tool available to site administrators. Public sources in the connected documents describe that the vulnerability stems from insufficient validation of externally entered SQL statements within the XMLDB editor,...

CVE-2024-43436 Moodle: site administration sql injection via xmldb editor

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

Moodle security vulnerabilities

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements i...

CVE-2024-43436: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators...

PT-2024-34634 · Froala · Froala Wysiwyg Editor

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG editor versions 4.3.0 and earlier Description: The issue is related to inconsistent parsing of the tag, which allows for cross-site scripting XSS in the Froala WYSIWYG editor. Recommendations: For versions 4.3.0 and earlier,...

CVE-2024-51434: Improper Neutralization of Input During Web Page Generation

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

CVE-2024-51434

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

Froala Editor security vulnerabilities

Froala Editor is a powerful JavaScript rich text editor from Froala. A security vulnerability exists in Froala Editor version 4.3.0 and earlier, which stems from the presence of inconsistent plaintext token parsing, resulting in susceptibility to cross-site scripting vulnerabilities...

CVE-2024-7879

The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

Exploit for CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Ar...

Basecamp: Mutation Based Stored XSS on Trix Editor version latest (2.1.8)

A vulnerability was discovered in the Trix Editor version 2.1.8 where a mutation-based stored cross-site scripting XSS attack was possible. The vulnerability could be exploited by crafting a malicious payload that, when copied and pasted into the editor, would trigger the execution of arbitrary...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2024-2793)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2024-2805)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...