The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the usergetuserdetails function in the Moodle training management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code, as there is no invocation of...