CVE-2017-5945

An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle

published February 10, 2017

CVSS
—
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insufficient filtration of user-supplied data in the "poodll_audio_url" HTTP GET parameter passed to the "filter_poodll_moodle32_2016112802/poodll/mp3recorderskins/brazil/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00874 · 58.3th percentile
Published
2017-02-10T06:51Z
EPSS history
Timeline
  • 10 FEB 06:51Z
    An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle
    cvelistv5