CVE-2023-46858

2023-10-2900:00:00

mitre

github.com

moodle 4.3

reflected xss

searchvalue parameter

teachers

rich content

security vulnerability

6 Medium

AI Score

Confidence

High

JSON

Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states “Some forms of rich content [are] used by teachers to enhance their courses … admins and teachers can post XSS-capable content, but students can not.”