~ / search / GHSA-g5m5-j48g-fr24

GHSA-g5m5-j48g-fr24

Moodle Cross Site Scripting (XSS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-32244

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle 3.10.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.

References

External links from the advisory. They lead to third-party sites.