The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 3, 2018 | Feb 10, 2009 |
| Suse | — | Upgrade moodle-frUpgrade moodle-zh_cnUpgrade moodle-kmUpgrade moodle-ptUpgrade moodle-viUpgrade moodle-csUpgrade moodle-ukUpgrade moodle-ruUpgrade moodle-knUpgrade moodle-fiUpgrade moodle-de_duUpgrade moodle-plUpgrade moodle-sqUpgrade moodle-nlUpgrade moodle-thUpgrade moodle-itUpgrade moodle-deUpgrade moodle-noUpgrade moodle-jaUpgrade moodle-koUpgrade moodleUpgrade moodle-etUpgrade moodle-roUpgrade moodle-trUpgrade moodle-bsUpgrade moodle-nnUpgrade moodle-mi_tnUpgrade moodle-esUpgrade moodle-faUpgrade moodle-hrUpgrade moodle-bgUpgrade moodle-svUpgrade moodle-heUpgrade moodle-msUpgrade moodle-lvUpgrade moodle-skUpgrade moodle-glUpgrade moodle-kaUpgrade moodle-slUpgrade moodle-srUpgrade moodle-isUpgrade moodle-idUpgrade moodle-tlUpgrade moodle-soUpgrade moodle-ltUpgrade moodle-huUpgrade moodle-afUpgrade moodle-gaUpgrade moodle-daUpgrade moodle-elUpgrade moodle-arUpgrade moodle-hiUpgrade moodle-euUpgrade moodle-caUpgrade moodle-be | Feb 17, 2015 | Feb 9, 2009 |
| Ubuntu | — | Upgrade moodle | Nov 8, 2024 | Feb 10, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub