Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4728
HistoryJul 27, 2017 - 1:08 a.m.

Cross-site Scripting (XSS)

2017-07-2701:08:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.001

Percentile

48.3%

Moodle is vulnerable to cross-site scripting (XSS) attacks. Authenticated attackers can inject web script and HTML into the application through the external_format_text function in lib/externallib.php