What is GHSA-7ghm-fp7p-qvjq?

GHSA-7ghm-fp7p-qvjq is a security advisory published by GitHub Security Advisories with Medium severity. Moodle XSS Vulnerability

Which CVE IDs does GHSA-7ghm-fp7p-qvjq cover?

GHSA-7ghm-fp7p-qvjq covers the following CVE IDs: CVE-2016-9188. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7ghm-fp7p-qvjq?

GHSA-7ghm-fp7p-qvjq has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-7ghm-fp7p-qvjq?

GHSA-7ghm-fp7p-qvjq affects 1 product, including: composer/moodle/moodle:\u003e= 2.0.1, \u003c= 3.2.1.

GHSA-7ghm-fp7p-qvjqMediumCVSS 6.1

Moodle XSS Vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

September 12, 2023

🔗 CVE IDs covered (1)

CVE-2016-9188 →

📋 Description

Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters.

🎯 Affected products1

composer/moodle/moodle:>= 2.0.1, <= 3.2.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2016-9188
https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html
https://web.archive.org/web/20210123190812/http://www.securityfocus.com/bid/94189
https://github.com/advisories/GHSA-7ghm-fp7p-qvjq