Описание
Moodle Vulnerable to Reflected Cross-site Scripting
It was found in Moodle before version 4.0.0-beta that some search inputs were vulnerable to reflected Cross-site Scripting (XSS) due to insufficient escaping of search queries.
Пакеты
moodle/moodle
>= 3.10, < 4.0.0-beta
4.0.0-beta
Связанные уязвимости
It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
It was found in Moodle before version 3.10.1 that some search inputs w ...
Уязвимость виртуальной обучающей среды Moodle, связанная с недостаточной очисткой введенных пользователем данных в определенных поисковых запросах, позволяющая нарушителю проводить межсайтовые сценарные атаки
ALT-PU-2021-1050: package `moodle` update to version 3.10.1-alt1