Lucene search
Veracode Vulnerability DatabaseVERACODE:22264HistoryJan 08, 2020 - 7:00 a.m.
Cross-site Scripting (XSS)
2020-01-0807:00:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
36.2%
moodle/moodle is vulnerable to cross-site scripting (XSS). The attack is possible because it does not escape the message and moreinfourl parameters in outputrenderers.php, allowing an attacker to inject malicious scripts and thereby causing the payload to be rendered and executed when the error message and URL strings are displayed .
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | 3.7.2 | |
| moodle/moodle | le | 3.6.6 | |
| moodle/moodle | le | 3.5.7 |
Related
ubuntucve
ubuntucve
CVE-2019-14884
2020-03-18 00:00:00
prion
prion
Cross site scripting
2020-03-18 13:15:00
redhatcve
redhatcve
CVE-2019-14884
2022-05-21 00:01:28
symantec
symantec
Moodle CVE-2019-14884 Cross Site Scripting Vulnerability
2019-11-18 00:00:00
github
github
Moodle reflected Cross-site Scripting (XSS)
2022-05-24 17:11:48
nvd
nvd
CVE-2019-14884
2020-03-18 13:15:12
cve
cve
CVE-2019-14884
2020-03-18 13:15:12
osv
osv
CVE-2019-14884
2020-03-18 13:15:12
Moodle reflected Cross-site Scripting (XSS)
2022-05-24 17:11:48
cvelist
cvelist
CVE-2019-14884
2020-03-18 12:17:36
openvas
openvas
Moodle < 3.5.9, 3.6.x < 3.6.7, 3.7.x < 3.7.3 Multiple Vulnerabilities
2019-11-20 00:00:00