Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22502
HistoryFeb 13, 2020 - 10:24 a.m.

Cross-Site Scripting (XSS)

2020-02-1310:24:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.001

Percentile

22.7%

moodle/moodle is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via the introeditor[text] parameter or the TinyMCE HTML editor

EPSS

0.001

Percentile

22.7%