Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4669
HistoryJul 25, 2017 - 8:56 p.m.

Cross-site Scripting (XSS)

2017-07-2520:56:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0.002

Percentile

60.3%

Moodle is vulnerable to cross-site scripting (XSS) attacks. The library does not escape strings in exception dialogues from AJAX calls, allowing a malicious users to inject and execute arbitrary script.