Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-33998

moodle: stored XSS via user's name on participants page when opening some options

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moodle

Default version status: unknown

  • 4.0 to ≤ 4.3.3affected
  • 4.2 to ≤ 4.2.6affected
  • 4.1 to ≤ 4.1.9affected

References