Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22262
HistoryJan 08, 2020 - 5:05 a.m.

Cross-Site Scripting (XSS)

2020-01-0805:05:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

36.3%

moodle/moodle is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a user’s browser via the user’s email, causing the payload to be rendered and executed on pages that displays the malicious email address.

CPENameOperatorVersion
moodle/moodlele3.7.2

0.001 Low

EPSS

Percentile

36.3%