Non notée
CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback
Description
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Moodle 3.x | Versions non publiées |
Références
- 100867 www.securityfocus.com
- moodle.org moodle.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Moodle 3.x
Les 10 CVE de Moodle 3.x →
CVE-2018-1042
Moodle 3.x has Server Side Request Forgery in the filepicker
Non notée
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames
Non notée
CVE-2018-1044
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings
Non notée
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name
Non notée