Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-34000

moodle: stored XSS in lesson overview report via user ID number

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moodle

Default version status: unknown

  • 4.0 to ≤ 4.3.3affected
  • 4.2 to ≤ 4.2.6affected
  • 4.1 to ≤ 4.1.9affected

References