Поиск уязвимостей
Количество 10
Количество 10
CVE-2025-67850
A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions.
CVE-2025-67850
A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions.
CVE-2025-67850
A flaw was found in moodle. This vulnerability, known as Cross-Site Sc ...
GHSA-6mmv-f6c6-v6q8
Moodle vulnerable to Cross-site Scripting
BDU:2025-11660
Уязвимость виртуальной обучающей среды Moodle, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить провести атаку межсайтового скриптинга (XSS)
ROS-20260224-80-0052
Уязвимость moodle
ROS-20260224-73-0022
Уязвимость moodle
ALT-PU-2024-1229
ALT-PU-2024-1229: package `moodle` update to version 4.3.0-alt1
ALT-PU-2026-2741
ALT-PU-2026-2741: package `moodle` update to version 5.1.2-alt2
ALT-PU-2023-6265
ALT-PU-2023-6265: package `moodle` update to version 4.3.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-67850 A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions. | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад |
 | CVE-2025-67850 A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions. | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад |
| CVE-2025-67850 A flaw was found in moodle. This vulnerability, known as Cross-Site Sc ... | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад |
| GHSA-6mmv-f6c6-v6q8 Moodle vulnerable to Cross-site Scripting | CVSS3: 7.3 | 0% Низкий | 9 месяцев назад |
 | BDU:2025-11660 Уязвимость виртуальной обучающей среды Moodle, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить провести атаку межсайтового скриптинга (XSS) | CVSS3: 5.7 | 0% Низкий | больше 1 года назад |
 | ROS-20260224-80-0052 Уязвимость moodle | CVSS3: 5.7 | 0% Низкий | 9 месяцев назад |
| ROS-20260224-73-0022 Уязвимость moodle | CVSS3: 5.7 | 0% Низкий | 9 месяцев назад |
| ALT-PU-2024-1229 ALT-PU-2024-1229: package `moodle` update to version 4.3.0-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2026-2741 ALT-PU-2026-2741: package `moodle` update to version 5.1.2-alt2 | CVSS3: 10 | 9 месяцев назад | |
| ALT-PU-2023-6265 ALT-PU-2023-6265: package `moodle` update to version 4.3.0-alt1 | CVSS3: 9.8 | около 3 лет назад |
Уязвимостей на страницу