CVE-2023-5541CWE-79

Moodle: xss risk when using csv grade import method

Low · published November 9, 2023

CVSS v3.1
3.3
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00535 · 44.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-11-09T19:18Z
EPSS history
Timeline
  • 09 NOV 19:18Z
    Moodle: xss risk when using csv grade import method
    cvelistv5