Not rated
CVE-2017-2645 In Moodle 3.x, XSS can occur via attachments to evidence of prior learning
Description
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle 3.x | Versions not published |
References
- 96982 www.securityfocus.com
- 1038174 www.securitytracker.com
- moodle.org moodle.org
Timeline
- Published
- Last modified
Other CVEs of Moodle 3.x
The 10 CVEs of Moodle 3.x →
CVE-2018-1042
Moodle 3.x has Server Side Request Forgery in the filepicker
Not rated
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames
Not rated
CVE-2018-1044
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings
Not rated
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name
Not rated