Lucene search
+L

1 matches found

OSV
OSV
added 2014/11/22 10:54 a.m.70 views

MGASA-2014-0483 Updated moodle package fixes security vulnerabilities

In Moodle before 2.6.5, without forcing encoding, it was possible that UTF7 characters could be used to force cross-site scripts to AJAX scripts although this is unlikely on modern browsers and on most Moodle pages MSA-14-0035. In Moodle before 2.6.5, an XSS issue through $searchcourse in...

7.5CVSS5.9AI score0.02427EPSS
SaveExploits0References18
Rows per page
Query Builder