Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47700
HistoryJun 24, 2024 - 4:47 a.m.

Cross-site Scripting (XSS)

2024-06-2404:47:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
moodle
cross-site scripting
xss
user input
field name parameter
new activity
improper validation
vulnerability
software
attacker
xss attacks

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

moodle/moodle is vulnerable to Cross-site Scripting (XSS). The vulnerability is caused due to improper validation of user input in the “Field Name” parameter associated with a new activity, which allows an attacker to perform XSS attacks.

CPENameOperatorVersion
moodle/moodlelev4.4.1
moodle/moodlelev4.4.1

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for VERACODE:47700