GHSA-xv72-6pgh-cjj8MediumCVSS 5.4

Moodle stored-XSS vulnerability in some "social" user profile fields

Published
November 23, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2022-45151 →

📋 Description

The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

🎯 Affected products2

  • composer/moodle/moodle:>= 3.11, < 3.11.11
  • composer/moodle/moodle:>= 4.0, < 4.0.5

🔗 References (8)