Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-36568
HistorySep 13, 2022 - 12:00 a.m.

CVE-2021-36568

2022-09-1300:00:00
ubuntu.com
ubuntu.com
13

0.001 Low

EPSS

Percentile

37.6%

In certain Moodle products after creating a course, it is possible to add
in a arbitrary “Topic” a resource, in this case a “Database” with the type
“Text” where its values “Field name” and “Field description” are vulnerable
to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle
3.10.4 and Moodle 3.9.7.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchmoodle< anyUNKNOWN
ubuntu16.04noarchmoodle< anyUNKNOWN

0.001 Low

EPSS

Percentile

37.6%