Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4717
HistoryJul 26, 2017 - 10:55 p.m.

Cross-site Scripting (XSS)

2017-07-2622:55:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.002

Percentile

59.1%

Moodle is vulnerable to cross-site scripting (XSS) attacks. Attackers can use the user_get_user_details function to inject arbitrary web script due to the absence of a call to external_format_text in a web service.