Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title).
CVSS Details
- CVSS 3.1 Base Score: 3.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 3, 2018 | Jul 25, 2008 |
| Suse | — | Upgrade moodle-huUpgrade moodle-zh_cnUpgrade moodle-ruUpgrade moodle-idUpgrade moodle-ltUpgrade moodle-euUpgrade moodle-faUpgrade moodle-bgUpgrade moodle-de_duUpgrade moodle-slUpgrade moodle-beUpgrade moodle-caUpgrade moodle-knUpgrade moodle-afUpgrade moodle-hiUpgrade moodle-glUpgrade moodle-lvUpgrade suse-releaseUpgrade moodle-gaUpgrade moodle-sqUpgrade moodle-msUpgrade moodle-koUpgrade moodle-svUpgrade moodle-heUpgrade moodle-trUpgrade moodle-mi_tnUpgrade moodle-roUpgrade moodle-esUpgrade moodle-soUpgrade moodle-frUpgrade moodle-etUpgrade moodle-jaUpgrade moodle-ptUpgrade moodle-skUpgrade moodle-daUpgrade moodle-itUpgrade moodle-viUpgrade moodle-csUpgrade moodle-bsUpgrade moodle-deUpgrade moodle-thUpgrade moodle-fiUpgrade moodle-nnUpgrade moodle-kaUpgrade moodle-arUpgrade moodle-tlUpgrade moodle-plUpgrade moodle-noUpgrade moodle-nlUpgrade moodle-ukUpgrade moodle-kmUpgrade moodle-isUpgrade moodleUpgrade moodle-hrUpgrade moodle-elUpgrade moodle-sr | Feb 17, 2015 | Jul 25, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub