Lucene search
Veracode Vulnerability DatabaseVERACODE:34689HistoryMar 15, 2022 - 6:59 a.m.
Cross-site Scripting (XSS)
2022-03-1506:59:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
0.001 Low
EPSS
Percentile
22.8%
moodle/moodle is vulnerable to stored cross-site scripting. The vulnerability exists in get_question_heading function in report.php due to lack of sanitization which allows an attacker to inject and execute arbitrary javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v3.11.6 | |
| moodle/moodle | le | v3.11.6 |
Related
github
github
Moodle stored Cross-site Scripting
2022-03-12 00:00:33
osv
osv
CVE-2021-32475
2022-03-11 18:15:16
BIT-moodle-2021-32475
2024-03-06 11:10:09
Moodle stored Cross-site Scripting
2022-03-12 00:00:33
nvd
nvd
CVE-2021-32475
2022-03-11 18:15:16
prion
prion
Cross site scripting
2022-03-11 18:15:00
cve
cve
CVE-2021-32475
2022-03-11 18:15:16
ubuntucve
ubuntucve
CVE-2021-32475
2022-03-11 00:00:00
cvelist
cvelist
CVE-2021-32475
2022-03-11 17:54:24
openvas
openvas
nessus
nessus
Moodle 3.8.x < 3.8.9 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.7 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.10.x < 3.10.4 Multiple Vulnerabilities
2023-02-20 00:00:00
