Lucene search
Veracode Vulnerability DatabaseVERACODE:47408HistoryJun 07, 2024 - 6:58 a.m.
Cross-site Scripting (XSS)
2024-06-0706:58:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
moodle
cross-site scripting
xss
insufficient sanitizing
moodle/moodle is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to insufficient sanitizing of ID numbers displayed in the report, which results in stored XSS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v4.3.3 | |
| moodle/moodle | le | v4.1.9 | |
| moodle/moodle | le | v4.2.6 | |
| moodle/moodle | le | v4.3.3 | |
| moodle/moodle | le | v4.1.9 | |
| moodle/moodle | le | v4.2.6 |
Related
cve
cve
CVE-2024-34000
2024-05-31 20:15:10
ubuntucve
ubuntucve
CVE-2024-34000
2024-05-31 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2024-34000
2024-05-31 20:15:10
github
github
Moodle Cross-site Scripting (XSS)
2024-05-31 21:30:53
osv
osv
Moodle Cross-site Scripting (XSS)
2024-05-31 21:30:53
openvas
openvas
Moodle < 4.1.10, 4.2.x < 4.2.7, 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00