Описание
Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.7.12+dfsg-1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected] |
| precise | not-affected | |
| trusty | not-affected | |
| trusty/esm | DNE | trusty was not-affected |
| upstream | not-affected | 2.7.12+dfsg-1 |
| vivid | not-affected | |
| wily | not-affected |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string.
Cross-site scripting (XSS) vulnerability in the search_pagination func ...
Moodle Cross-site scripting (XSS) vulnerability in course management search
Уязвимость системы управления обучением Мoodle, позволяющая нарушителю внедрить произвольный Веб- или HTML-код
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3