Not rated
CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback
Description
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle 3.x | Versions not published |
References
- 100867 www.securityfocus.com
- moodle.org moodle.org
Timeline
- Published
- Last modified
Other CVEs of Moodle 3.x
The 10 CVEs of Moodle 3.x →
CVE-2018-1042
Moodle 3.x has Server Side Request Forgery in the filepicker
Not rated
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames
Not rated
CVE-2018-1044
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings
Not rated
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name
Not rated