Lucene search
+L

618 matches found

Github Security Blog
Github Security Blog
added 2023/03/07 12:30 a.m.29 views

Moodle Cross-site Scripting vulnerability

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

5.4CVSS5.5AI score0.00516EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2023/03/07 12:30 a.m.28 views

Moodle vulnerable to Stored Cross-site Scripting

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

4.8CVSS5.5AI score0.0053EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/03/07 12:30 a.m.32 views

GHSA-G6H6-4FP6-W33W Moodle vulnerable to Stored Cross-site Scripting

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

4.8CVSS4.8AI score0.0053EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/06 11:15 p.m.22 views

Design/Logic Flaw

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk...

5CVSS5AI score0.00526EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/03/06 11:15 p.m.12 views

UBUNTU-CVE-2021-36402

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk...

5.3CVSS7.2AI score0.00526EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/06 10:15 p.m.40 views

CVE-2021-36401

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

4.8CVSS4.7AI score0.0053EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/06 10:15 p.m.26 views

CVE-2021-36399

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

5.4CVSS5.1AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/06 10:15 p.m.13 views

CVE-2021-36399

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

5.4CVSS5.3AI score
SaveExploits0References1
OSV
OSV
added 2023/03/06 10:15 p.m.14 views

CVE-2021-36398

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk...

5.4CVSS5.3AI score
SaveExploits0References1
Prion
Prion
added 2023/03/06 10:15 p.m.17 views

Cross site scripting

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk...

4.9CVSS5AI score0.00516EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/03/06 10:15 p.m.21 views

Cross site scripting

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

3.8CVSS4.5AI score0.0053EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/03/06 10:15 p.m.25 views

CVE-2021-36401

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

4.8CVSS6.8AI score0.0053EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/03/06 10:15 p.m.22 views

CVE-2021-36398

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk...

5.4CVSS6.1AI score0.00516EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/06 10:15 p.m.7 views

UBUNTU-CVE-2021-36399

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

5.4CVSS5.8AI score0.00516EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/06 10:15 p.m.5 views

UBUNTU-CVE-2021-36398

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk...

5.4CVSS5.8AI score0.00516EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/03/06 12:0 a.m.30 views

CVE-2021-36399

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk...

5.3AI score0.00516EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/06 12:0 a.m.90 views

CVE-2021-36402

Technical details (affected Moodle versions, remediation, exploitability) are not provided in the connected documents. Monitor for updates from official advisories; current entries reiterate a sanitization risk in Moodle account confirmation emails without further specifics.

5.3CVSS4.9AI score0.00526EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/03/06 12:0 a.m.75 views

CVE-2021-36398

Summary: CVE-2021-36398 affects Moodle. The vulnerability stems from insufficient sanitization of ID numbers displayed in the web service token list, enabling a stored XSS risk. Multiple connected sources (OSV, NVD-related entries, GHSA, Nessus, and related advisories) corroborate the issue. Affe...

5.4CVSS5AI score0.00516EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/06 12:0 a.m.8 views

CVE-2021-36398

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk...

6AI score0.00516EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/06 12:0 a.m.34 views

CVE-2021-36401

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk...

5.2AI score0.0053EPSS
SaveExploits0References1
Rows per page
Query Builder