The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
References
Configurations
History
21 Nov 2024, 07:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76131 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2142774 - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74SXNGA5RIWM7QNX7H3G7SYIQLP4UUGV/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRJB5JNKK3VVBLV3NH3RI7COEDAXSAB/ - | |
| References | () https://moodle.org/mod/forum/discuss.php?d=440771 - |
07 Dec 2022, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
26 Nov 2022, 03:40
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-23 15:15
Updated : 2024-11-21 07:28
NVD link : CVE-2022-45151
Mitre link : CVE-2022-45151
CVE.ORG link : CVE-2022-45151
JSON object : View
Products Affected
moodle
- moodle
fedoraproject
- fedora
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')