Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title).
CVSS Details
- CVSS 3.1 Base Score: 3.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 3, 2018 | Jul 25, 2008 |
| Suse | — | Upgrade moodle-knUpgrade moodle-koUpgrade moodle-zh_cnUpgrade moodle-faUpgrade moodle-hiUpgrade moodle-euUpgrade moodle-esUpgrade moodle-caUpgrade moodle-msUpgrade moodle-de_duUpgrade moodle-beUpgrade moodle-soUpgrade suse-releaseUpgrade moodle-huUpgrade moodle-sqUpgrade moodle-gaUpgrade moodle-lvUpgrade moodle-bgUpgrade moodle-glUpgrade moodle-svUpgrade moodle-afUpgrade moodle-ltUpgrade moodle-idUpgrade moodle-slUpgrade moodle-ruUpgrade moodle-trUpgrade moodle-heUpgrade moodle-roUpgrade moodle-mi_tnUpgrade moodle-ukUpgrade moodle-bsUpgrade moodle-csUpgrade moodle-jaUpgrade moodle-isUpgrade moodle-skUpgrade moodle-etUpgrade moodle-srUpgrade moodle-noUpgrade moodleUpgrade moodle-viUpgrade moodle-frUpgrade moodle-itUpgrade moodle-elUpgrade moodle-arUpgrade moodle-kaUpgrade moodle-fiUpgrade moodle-deUpgrade moodle-daUpgrade moodle-hrUpgrade moodle-nnUpgrade moodle-plUpgrade moodle-tlUpgrade moodle-thUpgrade moodle-ptUpgrade moodle-kmUpgrade moodle-nl | Feb 17, 2015 | Jul 25, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub