vulnerability
Moodle: CVE-2017-7298: Cross Site Scripting Vulnerability
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
4 | (AV:N/AC:M/Au:S/C:N/I:P/A:N) | Mar 29, 2017 | Sep 14, 2017 | Oct 30, 2017 |
Severity
4
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
Mar 29, 2017
Added
Sep 14, 2017
Modified
Oct 30, 2017
Description
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.
Solution
moodle-upgrade-latest

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.