Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-8qwh-4vwv-7c5m: Moodle Cross-site Scripting (XSS)

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.

ghsa
#xss#git

Moodle Cross-site Scripting (XSS)

Moderate severity GitHub Reviewed Published May 31, 2024 to the GitHub Advisory Database • Updated Jun 4, 2024

ghsa: Latest News

GHSA-pxg6-pf52-xh8x: cookie accepts cookie name, path, and domain with out of bounds characters