Поиск уязвимостей
Количество 6
Количество 6
CVE-2022-50943
Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies.
CVE-2022-50943
Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies.
CVE-2022-50943
Moodle LMS 4.0 contains a cross-site scripting vulnerability that allo ...
GHSA-f439-48pp-hm2q
Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies.
ALT-PU-2024-1229
ALT-PU-2024-1229: package `moodle` update to version 4.3.0-alt1
ALT-PU-2023-6265
ALT-PU-2023-6265: package `moodle` update to version 4.3.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-50943 Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2022-50943 Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| CVE-2022-50943 Moodle LMS 4.0 contains a cross-site scripting vulnerability that allo ... | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| GHSA-f439-48pp-hm2q Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2024-1229 ALT-PU-2024-1229: package `moodle` update to version 4.3.0-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2023-6265 ALT-PU-2023-6265: package `moodle` update to version 4.3.0-alt1 | CVSS3: 9.8 | около 3 лет назад |
Уязвимостей на страницу