GHSA-9jf6-wq34-fg9w

ghsaUSosv

Moodle XSS Vulnerability

view advisory published 2022-05-24Licence: CC-BY-4.0

A vulnerability was found in moodle 3.7 to 3.7.2 and before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-14881US	medium6.1	1.11% (66th)	—	2020-03-18
A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed.

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14881WEB
https://github.com/moodle/moodlePACKAGE
https://github.com/moodle/moodle/commit/7455b741c954af3c3e7dfda2972edc1146ea1562WEB
https://moodle.org/mod/forum/discuss.php?d=393584#p1586746WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-14881ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan