Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4694
HistoryJul 26, 2017 - 6:56 a.m.

Cross-Site Scripting (XSS)

2017-07-2606:56:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.002

Percentile

59.1%

Moodle is vulnerable to cross-site scripting (XSS) attacks. The attacks exist because output from mod_data advanced search form fields values are not sanitize properly, allowing the attackers to target users with higher permissions to click a link through this loophole.