CVE-2020-25627

CVE-2020-25627 Stored XSS via moodlenetprofile parameter in user profile My PoC about this CVE User requirement: Student Or the site for registeration XSS in moodlenetprofile Step 1: Log in with an authenticated user Can register or through creating a new user without assigning roles Step 2: Quic...

EUVD-2022-4562

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-25627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2. CVE-2020-256...

CVE-2020-25627

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2...

CVE-2020-25627

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2...

CVE-2020-25627

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2...

CVE-2020-25627

CVE-2020-25627 affects Moodle 3.9.x (versions 3.9–3.9.1) where the moodlenetprofile user profile field required extra sanitizing, causing a stored cross-site scripting (XSS) risk. The issue is resolved by upgrading to Moodle 3.9.2, which fixes the sanitization flaw. All linked sources consistentl...

CVE-2020-25627: Improper Neutralization of Input During Web Page Generation

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2...