CVE-2023-5546
Moodle: stored xss in quiz grading report via user id number
Summary
Moodle: stored xss in quiz grading report via user id number
Original description
The description as published by the source.
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.0.11"},{"introduced":"4.1.0"},{"fixed":"4.1.6"},{"introduced":"4.2.0"},{"fixed":"4.2.3"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web moodle.org
- web git.moodle.org