375 matches found
Moodle stored Cross-site Scripting
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
GHSA-5WJH-V7C8-WRHX Moodle stored Cross-site Scripting
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
UBUNTU-CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
Cross site scripting
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
CVE-2021-32475
CVE-2021-32475 affects Moodle versions 3.10.0–3.10.3, 3.9.0–3.9.6, 3.8.0–3.8.8, and 3.5–3.5.17 (and older unsupported) where IDs shown in the quiz grading report could be stored XSS vectors due to insufficient sanitization. The issue is a stored XSS in the quiz grading report ID display. The conn...
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
CVE-2021-32475: Improper Neutralization of Special Elements used in an OS Command
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...
Student Quarterly Grading System Cross-Site Scripting Vulnerability (CNVD-2022-67487)
Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...
CVE-2021-41658
Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...
CVE-2021-41658
Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...
Cross site scripting
Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...
CVE-2021-41658
Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...
CVE-2021-41658
CVE-2021-41658 affects the Sourcecodester Student Quarterly Grading System (by oretnom23). The vulnerability is a Cross Site Scripting (XSS) issue exploitable via the fullname and username parameters on the users page, allowing an attacker to execute arbitrary code. The connected records corrobor...
PT-2022-11455
Name of the Vulnerable Software and Affected Versions Sourcecodester Student Quarterly Grading System affected versions not specified Description The issue allows attackers to execute arbitrary code via the fullname and username parameters to the "users page" API endpoint. This enables the...
Student Quarterly Grading System 跨站脚本漏洞
Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...
CVE-2021-41658: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...