Moodle is vulnerable to stored cross-site scripting (XSS) due to improper input sanitization. Using this vulnerability, an attacker can affect how page
more...
Moodle is vulnerable to stored cross-site scripting (XSS) due to improper input sanitization. Using this vulnerability, an attacker can affect how pages are rendered and store payloads in order to steal sensitive information like user session cookies and authentication tokens.
**Note:** This has been disputed by the vendor, who claims the functionality can only by accessed by administrator users, who are trusted not to perform XSS.
less...
This site uses cookies to give you the best possible experience.
By using the site, you consent to our use of cookies.
For more information, please see our
Privacy Policy