Cross-site Scripting (XSS)

🗓️ 26 Jul 2022 03:32:52Reported by Veracode Vulnerability DatabaseType

moodle software XSS vulnerability in userreporttracks.ph

Reporter	Title	Published	Views	Family All 60
ATTACKERKB	CVE-2022-35651	25 Jul 202216:15	–	attackerkb
Circl	CVE-2022-35651	25 Jul 202220:33	–	circl
CNNVD	Moodle 跨站脚本漏洞	19 Jul 202200:00	–	cnnvd
CNVD	Moodle Input Validation Error Vulnerability (CNVD-2022-54916)	21 Jul 202200:00	–	cnvd
CVE	CVE-2022-35651	25 Jul 202215:30	–	cve
Cvelist	CVE-2022-35651	25 Jul 202215:30	–	cvelist
EUVD	EUVD-2022-6443	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 36 Update: moodle-3.11.8-1.fc36	27 Jul 202202:24	–	fedora
Fedora	[SECURITY] Fedora 35 Update: moodle-3.11.8-1.fc35	27 Jul 202202:35	–	fedora
Github Security Blog	Moodle Stored XSS and blind SSRF possible via SCORM track details	26 Jul 202200:00	–	github

Vulners

Node

moodle moodle/moodleRangev4.0.0-beta–4.0.0-betaphp

moodle moodle/moodleRangev3.9.6–3.9.6php

moodle moodle/moodleRangev2.6.0-beta–2.6.0-betaphp

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/moodle/moodle/commit/0f4e8413fcb0b66b0e4d0a816e099f4fc754f1e5
github	www.github.com/moodle/moodle/commit/f9ca67a78d6aae5ade74bba54bf86a97f7fd0ee0
github	www.github.com/moodle/moodle/commit/7be2023401d8ef76e1e7de0b9b5491ce7e26540b
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
github	www.github.com/advisories/GHSA-wwv7-h477-wrv7
git	www.git.moodle.org/gw

07 Nov 2023 22:08Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.1

EPSS0.00281