Lucene search
Veracode Vulnerability DatabaseVERACODE:7076HistoryJul 17, 2018 - 7:54 a.m.
Cross-site Scripting (XSS)
2018-07-1707:54:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
21.8%
moodle is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the event name parameter of the calendar, allowing a trusted user to inject and execute arbitrary Javascript through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | 3.1.9 | |
| moodle/moodle | le | 3.3.3 | |
| moodle/moodle | le | 3.2.6 |
Related
cve
cve
CVE-2018-1045
2018-01-22 08:29:00
openvas
openvas
Moodle 3.x XSS Vulnerability (Jan 2018) - Windows
2018-05-09 00:00:00
Moodle 3.x XSS Vulnerability (Jan 2018) - Linux
2018-05-09 00:00:00
Fedora Update for moodle FEDORA-2018-c587c0a62d
2018-02-01 00:00:00
ubuntucve
ubuntucve
CVE-2018-1045
2018-01-22 00:00:00
cvelist
cvelist
CVE-2018-1045
2018-01-22 08:00:00
osv
osv
Moodle XSS Vulnerability
2022-05-14 03:46:13
CVE-2018-1045
2018-01-22 08:29:00
github
github
Moodle XSS Vulnerability
2022-05-14 03:46:13
prion
prion
Code injection
2018-01-22 08:29:00
nvd
nvd
CVE-2018-1045
2018-01-22 08:29:00
fedora
fedora
[SECURITY] Fedora 26 Update: moodle-3.2.7-1.fc26
2018-01-31 18:06:24
[SECURITY] Fedora 27 Update: moodle-3.3.4-1.fc27
2018-01-31 21:59:13
nessus
nessus
Fedora 27 : moodle (2018-c587c0a62d)
2018-02-01 00:00:00
Fedora 26 : moodle (2018-7e086e3309)
2018-02-01 00:00:00