Lucene search
Veracode Vulnerability DatabaseVERACODE:29713HistoryMar 16, 2021 - 4:34 a.m.
Cross-Site Scripting (XSS)
2021-03-1604:34:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
moodle
vulnerability
cross-site scripting
user profile
javascript
browser
arbitrary payload
EPSS
0.001
Percentile
33.0%
moodle/moodle is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute arbitrary Javascript in user’s browser via by storing a malicious payload within the ID number from the user profile field.
Related
redhatcve
redhatcve
CVE-2021-20279
2022-05-20 23:33:38
cvelist
cvelist
CVE-2021-20279
2021-03-15 21:35:37
prion
prion
Cross site scripting
2021-03-15 22:15:00
nvd
nvd
CVE-2021-20279
2021-03-15 22:15:13
osv
osv
BIT-moodle-2021-20279
2024-03-06 11:11:03
CVE-2021-20279
2021-03-15 22:15:13
Moodle contains Stored XSS via ID number user profile field
2022-05-24 17:44:37
github
github
Moodle contains Stored XSS via ID number user profile field
2022-05-24 17:44:37
ubuntucve
ubuntucve
CVE-2021-20279
2021-03-15 00:00:00
cve
cve
CVE-2021-20279
2021-03-15 22:15:13
fedora
fedora
[SECURITY] Fedora 33 Update: moodle-3.9.5-1.fc33
2021-03-23 01:34:46
[SECURITY] Fedora 34 Update: moodle-3.10.2-1.fc34
2021-03-19 20:34:49
[SECURITY] Fedora 32 Update: moodle-3.8.8-1.fc32
2021-03-23 01:12:58
openvas
openvas
Fedora: Security Advisory for moodle (FEDORA-2021-50f63a0161)
2021-03-24 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2021-1c27e89d49)
2021-03-20 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2021-431b232659)
2021-03-24 00:00:00
nessus
nessus
Fedora 32 : moodle (2021-50f63a0161)
2021-03-23 00:00:00
Fedora 33 : moodle (2021-431b232659)
2021-03-23 00:00:00
Moodle 3.8.x < 3.8.8 Multiple Vulnerabilities
2023-02-20 00:00:00