Lucene search
Veracode Vulnerability DatabaseVERACODE:47405HistoryJun 07, 2024 - 6:37 a.m.
Cross-site Scripting (XSS)
2024-06-0706:37:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
cross-site scripting
moodle
vulnerable
equation editor
insufficient sanitization
stored xss risk
editing
moodle/moodle is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to insufficient sanitization when opening the equation editor, leading to a stored XSS risk when editing another user’s equation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v4.3.3 | |
| moodle/moodle | le | v4.1.9 | |
| moodle/moodle | le | v4.2.6 | |
| moodle/moodle | le | v4.3.3 | |
| moodle/moodle | le | v4.1.9 | |
| moodle/moodle | le | v4.2.6 |
Related
ubuntucve
ubuntucve
CVE-2024-33997
2024-05-31 00:00:00
cve
cve
CVE-2024-33997
2024-05-31 20:15:09
github
github
Moodle stored Cross-site Scripting (XSS)
2024-05-31 21:30:52
nvd
nvd
CVE-2024-33997
2024-05-31 20:15:09
vulnrichment
vulnrichment
cvelist
cvelist
osv
osv
Moodle stored Cross-site Scripting (XSS)
2024-05-31 21:30:52
openvas
openvas
Moodle < 4.1.10, 4.2.x < 4.2.7, 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00