CVE-2021-36568

In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text"…

published September 13, 2022

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" where its values "Field name" and "Field description" are vulnerable to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle 3.10.4 and Moodle 3.9.7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01045 · 63.9th percentile
Published
2022-09-13T21:06Z
EPSS history
Timeline
  • 13 SEP 21:06Z
    In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text"…
    cvelistv5