Lucene search
Veracode Vulnerability DatabaseVERACODE:4670HistoryJul 25, 2017 - 9:19 p.m.
Cross-site Scripting (XSS)
2017-07-2521:19:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
41.9%
Moodle is vulnerable to cross-site scripting (XSS) attacks. The library does not properly filter user input in the qualification and rating fields for rubric/advanced grading. This allows a malicious user to inject and execute arbitrary script.
Related
ubuntucve
ubuntucve
CVE-2014-3551
2014-07-29 00:00:00
cvelist
cvelist
CVE-2014-3551
2014-07-29 10:00:00
prion
prion
Cross site scripting
2014-07-29 11:10:00
github
github
Moodle multiple cross-site scripting (XSS) vulnerabilities
2022-05-13 01:12:41
osv
osv
Moodle multiple cross-site scripting (XSS) vulnerabilities
2022-05-13 01:12:41
nvd
nvd
CVE-2014-3551
2014-07-29 11:10:32
cve
cve
CVE-2014-3551
2014-07-29 11:10:32
nessus
nessus
Moodle Multiple XSS
2014-09-30 00:00:00
Moodle < 2.4 / 2.4.x < 2.4.11 / 2.5.x < 2.5.7 / 2.6.x < 2.6.4 / 2.7.x < 2.7.1 Multiple Vulnerabilities
2015-04-20 00:00:00
Fedora 20 : moodle-2.5.7-1.fc20 (2014-8601)
2014-07-31 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0308)
2022-01-28 00:00:00
Fedora Update for moodle FEDORA-2014-15102
2014-11-26 00:00:00
Fedora Update for moodle FEDORA-2014-10802
2014-10-01 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-08-06 00:08:48
fedora
fedora
[SECURITY] Fedora 20 Update: moodle-2.5.9-1.fc20
2014-11-25 15:30:01
[SECURITY] Fedora 20 Update: moodle-2.5.8-1.fc20
2014-09-25 10:46:26
[SECURITY] Fedora 20 Update: moodle-2.5.7-1.fc20
2014-07-30 07:03:13