Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36727
HistoryAug 17, 2022 - 6:03 a.m.

Cross-site Scripting (XSS)

2022-08-1706:03:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
moodle
software
xss
vulnerability
util.php
remote attacker
malicious code
injection

EPSS

0.001

Percentile

48.8%

moodle/moodle is vulnerable to cross-site scripting.The vulnerability exists due to additional input escaping of lib/phpunit/classes/util.php parameter which allows a remote attacker to inject and execute malicious code into the system.

EPSS

0.001

Percentile

48.8%