Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g6pg-29qv-3h3r

Опубликовано: 30 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.

EPSS

Процентиль: 10%
0.00198
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
около 1 месяца назад

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.

CVSS3: 5.4
nvd
около 1 месяца назад

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.

CVSS3: 5.4
debian
около 1 месяца назад

A flaw was found in Moodle. Insufficient output escaping in templates ...

CVSS3: 8.8
altlinux
3 месяца назад

ALT-PU-2026-12636: package `moodle` update to version 5.2.2-alt1

EPSS

Процентиль: 10%
0.00198
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-79