Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4807
HistoryJul 30, 2017 - 8:30 a.m.

Cross-site Scripting (XSS)

2017-07-3008:30:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.002

Percentile

60.3%

Moodle is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary web script through the PARAM_RAW parameter in repository/url/lib.php.