Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28526
HistoryDec 10, 2020 - 3:03 a.m.

Cross-Site Scripting (XSS)

2020-12-1003:03:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

33.9%

moodle/moodle is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript via the moodlenetprofile user profile field.

CPENameOperatorVersion
moodle/moodlele3.9.1

0.001 Low

EPSS

Percentile

33.9%