Lucene search
Veracode Vulnerability DatabaseVERACODE:47411HistoryJun 07, 2024 - 7:12 a.m.
Cross-site Scripting (XSS)
2024-06-0707:12:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
moodle
xss
vulnerability
participant's page table
code injection
moodle/moodle is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to insufficient escaping of participants’ names in the participant’s page table, allowing for malicious code injection when interacting with certain features.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v4.3.3 | |
| moodle/moodle | le | v4.1.9 | |
| moodle/moodle | le | v4.2.6 | |
| moodle/moodle | le | v4.3.3 | |
| moodle/moodle | le | v4.1.9 | |
| moodle/moodle | le | v4.2.6 |
Related
ubuntucve
ubuntucve
CVE-2024-33998
2024-05-31 00:00:00
nvd
nvd
CVE-2024-33998
2024-05-31 20:15:09
cvelist
cvelist
github
github
Moodle Cross-site Scripting (XSS)
2024-05-31 21:30:52
cve
cve
CVE-2024-33998
2024-05-31 20:15:09
vulnrichment
vulnrichment
osv
osv
Moodle Cross-site Scripting (XSS)
2024-05-31 21:30:52
openvas
openvas
Moodle < 4.1.10, 4.2.x < 4.2.7, 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00