Not rated
CVE-2017-2644 In Moodle 3.x, XSS can occur via evidence of prior learning
Description
In Moodle 3.x, XSS can occur via evidence of prior learning.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle 3.x | Versions not published |
References
- moodle.org moodle.org
- 1038174 www.securitytracker.com
- 96979 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Moodle 3.x
The 10 CVEs of Moodle 3.x →
CVE-2018-1042
Moodle 3.x has Server Side Request Forgery in the filepicker
Not rated
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames
Not rated
CVE-2018-1044
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings
Not rated
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name
Not rated