CVE-2017-2645 In Moodle 3.x, XSS can occur via attachments to evidence of prior learning

Description

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Moodle 3.x	Versions non publiées

Autres CVE de Moodle 3.x

Les 10 CVE de Moodle 3.x →

CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker Non notée CVE-2018-1043 In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames Non notée CVE-2018-1044 In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings Non notée CVE-2018-1045 In Moodle 3.x, there is XSS via a calendar event name Non notée