Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4797
HistoryJul 30, 2017 - 2:56 a.m.

Cross-site Scripting (XSS)

2017-07-3002:56:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.001

Percentile

48.3%

Moodle is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary web script through the $searchcourse parameter in mod/feedback/mapcourse.php.

EPSS

0.001

Percentile

48.3%