GHSA-6656-6qwx-4c2mMedium

Moodle XSS In Tag Autocomplete functionality

Published
May 13, 2022
Last Modified
January 17, 2024

🔗 CVE IDs covered (1)

CVE-2011-4278 →

📋 Description

Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products2

  • composer/moodle/moodle:>= 2.0, < 2.0.2
  • composer/moodle/moodle:< 1.9.11

🔗 References (7)