Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 3, 2018 | Feb 10, 2009 |
| Suse | — | Upgrade moodle-srUpgrade moodle-hiUpgrade moodle-caUpgrade moodle-beUpgrade moodle-slUpgrade moodle-heUpgrade moodle-euUpgrade moodle-msUpgrade moodle-huUpgrade moodle-afUpgrade moodle-esUpgrade moodle-soUpgrade moodle-bgUpgrade moodle-gaUpgrade moodle-lvUpgrade moodle-glUpgrade moodle-mi_tnUpgrade moodle-tlUpgrade moodle-arUpgrade moodle-faUpgrade moodle-isUpgrade moodle-elUpgrade moodle-ltUpgrade moodle-hrUpgrade moodle-skUpgrade moodle-kaUpgrade moodle-idUpgrade moodle-nnUpgrade moodle-svUpgrade moodle-daUpgrade moodle-thUpgrade moodle-kmUpgrade moodle-csUpgrade moodle-ukUpgrade moodle-viUpgrade moodle-trUpgrade moodle-ruUpgrade moodle-bsUpgrade moodle-nlUpgrade moodle-fiUpgrade moodle-knUpgrade moodle-zh_cnUpgrade moodle-sqUpgrade moodle-de_duUpgrade moodle-noUpgrade moodle-deUpgrade moodle-plUpgrade moodleUpgrade moodle-ptUpgrade moodle-itUpgrade moodle-koUpgrade moodle-etUpgrade moodle-frUpgrade moodle-jaUpgrade moodle-ro | Feb 17, 2015 | Feb 9, 2009 |
| Ubuntu | — | Upgrade moodle | Nov 8, 2024 | Feb 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub