Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4476
HistoryJun 23, 2017 - 6:26 a.m.

Cross-site Scripting (XSS)

2017-06-2306:26:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.003

Percentile

65.5%

Moodle is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary JavaScript through the lti_typename parameter or the lti_toolurl parameter.

EPSS

0.003

Percentile

65.5%