Количество 6
Количество 6
CVE-2025-67850
A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions.
CVE-2025-67850
A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions.
CVE-2025-67850
A flaw was found in moodle. This vulnerability, known as Cross-Site Sc ...
GHSA-6mmv-f6c6-v6q8
Moodle vulnerable to Cross-site Scripting
BDU:2025-11660
Уязвимость виртуальной обучающей среды Moodle, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить провести атаку межсайтового скриптинга (XSS)
ROS-20260224-73-0022
Уязвимость moodle
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-67850 A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions. | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
 | CVE-2025-67850 A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions. | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
| CVE-2025-67850 A flaw was found in moodle. This vulnerability, known as Cross-Site Sc ... | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
| GHSA-6mmv-f6c6-v6q8 Moodle vulnerable to Cross-site Scripting | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
 | BDU:2025-11660 Уязвимость виртуальной обучающей среды Moodle, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить провести атаку межсайтового скриптинга (XSS) | CVSS3: 5.7 | 0% Низкий | около 1 года назад |
 | ROS-20260224-73-0022 Уязвимость moodle | CVSS3: 5.7 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу