~ / search / GHSA-3qw5-v9cc-v262

GHSA-3qw5-v9cc-v262

Cross site scripting in moodle

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-29374

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle <= 3.10.9 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.

References

External links from the advisory. They lead to third-party sites.