Security Advisory

CVE-2021-36568

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-13 21:06:51

Last updated 2024-08-04 01:01:57

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" where its values "Field name" and "Field description" are vulnerable to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle 3.10.4 and Moodle 3.9.7.

← Browse all CVEs View on cve.org ↗