CVE-2023-46858

Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher

published October 29, 2023

CVSS
—
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00617 · 48.9th percentile
Published
2023-10-29T00:00Z
EPSS history
Timeline
  • 29 OCT 00:00Z
    Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher
    cvelistv5