Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4394
HistoryJun 07, 2017 - 7:14 a.m.

Cross-site Scripting (XSS)

2017-06-0707:14:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.001

Percentile

29.4%

Moodle is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary JavaScript by uploading a zip file through the assignment submission function. This results in text and HTML being rendered during a download all action.

EPSS

0.001

Percentile

29.4%