Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-g6h6-4fp6-w33w: Moodle vulnerable to Stored Cross-site Scripting

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.

ghsa
#xss#git

Moodle vulnerable to Stored Cross-site Scripting

Moderate severity GitHub Reviewed Published Mar 7, 2023 to the GitHub Advisory Database • Updated Mar 8, 2023

Related news

CVE-2021-36401

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.