Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3f43-8vw5-xcf9

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.

Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.

EPSS

Процентиль: 49%
0.00263
Низкий

Дефекты

CWE-79

Связанные уязвимости

ubuntu
почти 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.

nvd
почти 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.

debian
почти 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionli ...

EPSS

Процентиль: 49%
0.00263
Низкий

Дефекты

CWE-79