CVE-2024-34000
moodle: stored XSS in lesson overview report via user ID number
Summary
moodle: stored XSS in lesson overview report via user ID number
Original description
The description as published by the source.
ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.10"},{"introduced":"4.2.0"},{"fixed":"4.2.7"},{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org