Lucene search
Veracode Vulnerability DatabaseVERACODE:33069HistoryNov 23, 2021 - 8:22 a.m.
Cross-site Scripting (XSS)
2021-11-2308:22:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
cross-site scripting
moodle
url parameter
administrator tool
javascript
EPSS
0.001
Percentile
36.6%
moodle/moodle is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the URL parameter of the filetype site administrator tool, allowing an attacker to inject and execute malicious javascript.
Related
cvelist
cvelist
CVE-2021-43558
2021-11-22 15:59:46
osv
osv
CVE-2021-43558
2021-11-22 16:15:08
Cross-site Scripting in moodle
2021-11-23 00:00:51
BIT-moodle-2021-43558
2024-03-06 11:06:48
ubuntucve
ubuntucve
CVE-2021-43558
2021-11-22 00:00:00
prion
prion
Cross site scripting
2021-11-22 16:15:00
cve
cve
CVE-2021-43558
2021-11-22 16:15:08
nvd
nvd
CVE-2021-43558
2021-11-22 16:15:08
cnvd
cnvd
Moodle Cross-Site Scripting Vulnerability (CNVD-2021-93379)
2021-11-17 00:00:00
github
github
Cross-site Scripting in moodle
2021-11-23 00:00:51
nessus
nessus
Moodle 3.11.x < 3.11.4 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.11 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.10.x < 3.10.8 Multiple Vulnerabilities
2023-02-20 00:00:00
openvas
openvas
Moodle < 3.9.11, 3.10.x < 3.10.8, 3.11.x < 3.11.4 Multiple Vulnerabilities
2021-11-23 00:00:00