Stored Cross-Site Scripting (XSS)

moodle/moodle is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to the quiz override page via the user ID which allows an attacker to inject and execute arbitrary JavaScript in the browser...

CVE-2021-36399

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

CVE-2021-36399: Improper Neutralization of Input During Web Page Generation

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

PT-2021-3688

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description The issue is related to a stored XSS risk in Moodle, where ID numbers displayed in the quiz override screens required additional sanitizing. This could allow a remote attacker to perform...