Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34699
HistoryMar 15, 2022 - 12:59 p.m.

Cross-site Scripting (XSS)

2022-03-1512:59:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
moodle
xss
vulnerability
sanitization
attacker
code
execution
software

EPSS

0.001

Percentile

31.3%

moodle/moodle is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of sanitization in the redirect URI allowing a malicious attacker to inject and execute arbitrary code.

EPSS

0.001

Percentile

31.3%