Lucene search
+L

375 matches found

Github Security Blog
Github Security Blog
•added 2022/03/12 12:00 a.m.•45 views

Moodle stored Cross-site Scripting

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS5.5AI score0.00592EPSS
SaveExploits0References3Affected Software1
osv-ghsa
osv-ghsa
•added 2022/03/12 12:00 a.m.•37 views

GHSA-5WJH-V7C8-WRHX Moodle stored Cross-site Scripting

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS5.9AI score0.00592EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/11 6:15 p.m.•13 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS6.7AI score0.00592EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2022/03/11 6:15 p.m.•32 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS5.6AI score
SaveExploits0References1
NVD
NVD
•added 2022/03/11 6:15 p.m.•47 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS0.00592EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2022/03/11 6:15 p.m.•18 views

UBUNTU-CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS7.1AI score0.00592EPSS
SaveExploits0References3
Prion
Prion
•added 2022/03/11 6:15 p.m.•33 views

Cross site scripting

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

3.5CVSS5AI score0.00592EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/03/11 5:54 p.m.•123 views

CVE-2021-32475

CVE-2021-32475 affects Moodle versions 3.10.0–3.10.3, 3.9.0–3.9.6, 3.8.0–3.8.8, and 3.5–3.5.17 (and older unsupported) where IDs shown in the quiz grading report could be stored XSS vectors due to insufficient sanitization. The issue is a stored XSS in the quiz grading report ID display. The conn...

5.4CVSS5.4AI score0.00592EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/11 5:54 p.m.•49 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.6AI score0.00592EPSS
SaveExploits0References1
Mend
Mend
•added 2022/03/11 5:54 p.m.•6 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS0.00592EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/11 12:00 a.m.•6 views

CVE-2021-32475: Improper Neutralization of Special Elements used in an OS Command

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS6.7AI score0.00592EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/01/26 12:00 a.m.•40 views

Student Quarterly Grading System Cross-Site Scripting Vulnerability (CNVD-2022-67487)

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...

5.4CVSS3.6AI score0.00728EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/24 5:15 p.m.•15 views

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

5.4CVSS6.1AI score0.00728EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/24 5:15 p.m.•10 views

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

5.4CVSS6.4AI score0.00728EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/24 5:15 p.m.•18 views

Cross site scripting

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

3.5CVSS5.6AI score0.00728EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/24 4:03 p.m.•34 views

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

5.8AI score0.00728EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/24 4:03 p.m.•56 views

CVE-2021-41658

CVE-2021-41658 affects the Sourcecodester Student Quarterly Grading System (by oretnom23). The vulnerability is a Cross Site Scripting (XSS) issue exploitable via the fullname and username parameters on the users page, allowing an attacker to execute arbitrary code. The connected records corrobor...

5.4CVSS5.6AI score0.00728EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•5 views

PT-2022-11455

Name of the Vulnerable Software and Affected Versions Sourcecodester Student Quarterly Grading System affected versions not specified Description The issue allows attackers to execute arbitrary code via the fullname and username parameters to the "users page" API endpoint. This enables the...

5.4CVSS0.00728EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•15 views

Student Quarterly Grading System 跨站脚本漏洞

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...

5.4CVSS5.8AI score0.00728EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•10 views

CVE-2021-41658: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

5.4CVSS6.4AI score0.00728EPSS
SaveExploits1References2
Rows per page
Query Builder