Описание
Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | DNE | |
| noble | DNE | |
| oracular | DNE |
Показывать по
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity.
Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote ...
Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity.
Уязвимость компонента New Activity Handler виртуальной обучающей среды Moodle, позволяющая нарушителю выполнить произвольный код
ALT-PU-2021-1050: package `moodle` update to version 3.10.1-alt1
EPSS
5.5 Medium
CVSS3