Cross-Site Scripting (XSS)

🗓️ 27 Mar 2023 04:26:54Reported by Veracode Vulnerability DatabaseType

Moodle vulnerable to Cross-Site Scripting (XSS) due to lack of sanitizing in filter.php

Reporter	Title	Published	Views	Family All 59
ATTACKERKB	CVE-2023-28331	23 Mar 202321:15	–	attackerkb
CNNVD	Moodle 跨站脚本漏洞	21 Mar 202300:00	–	cnnvd
CVE	CVE-2023-28331	23 Mar 202300:00	–	cve
Cvelist	CVE-2023-28331 Moodle: xss risk when outputting database activity filter data	23 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-0917	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 36 Update: moodle-3.11.13-1.fc36	30 Mar 202301:16	–	fedora
Tenable Nessus	Fedora 36 : moodle (2023-d9c13996b2)	30 Mar 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-28331	2 Sep 202500:00	–	nessus
Tenable Nessus	Moodle 4.1.x < 4.1.2 Multiple Vulnerabilities	10 Apr 202500:00	–	nessus
Tenable Nessus	Moodle 4.0.x < 4.0.7 Multiple Vulnerabilities	10 Apr 202500:00	–	nessus

Vulners

Node

moodle moodle/moodleRangev2.2.0-beta–2.2.0-betaphp

moodle moodle/moodleRangev3.10.0-beta–3.10.0-betaphp

moodle moodle/moodleRangev4.0.0-beta–4.0.0-betaphp

moodle moodle/moodleRangev4.1.0-beta–4.1.0-betaphp

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php
github	www.github.com/moodle/moodle/commit/a099b1d89326185328b38f6377983cfe68ca0e9d
github	www.github.com/moodle/moodle/commit/bb7163fc2bdea7c79937a0dfea42b335409a7e15
github	www.github.com/moodle/moodle/commit/1d23929fa9ae49fdfa74726be6389d4382bebc6f
github	www.github.com/moodle/moodle/commit/0292427f5166fd27da0fb004df90fddec43a2c53
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/
github	www.github.com/advisories/GHSA-77jm-f3vj-xvx2
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

25 Feb 2025 23:22Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.1

EPSS0.00662

SSVC