Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitization of user-supplied data in policy tool. An attacker can trick the victim to open a specially crafted link that executes an arbitrary HTML and script code in user's browser in context of vulnerable website. This vulnerability may allow an attacker to perform cross-site scripting (XSS) attacks to gain access potentially sensitive information and modification of web pages.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Moodle 跨站脚本漏洞
Vulnerability Description
Moodle是一套免费、开源的电子学习软件平台，也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle 4.0 到 4.0.4版本、3.11 到 3.11.10版本、3.9 到 3.9.17版本和之前版本存在安全漏洞，该漏洞源于策略工具中用户提供的数据未充分清理而存在此缺陷，攻击者利用该漏洞可以欺骗受害者打开一个特制的链接，该链接在易受攻击的网站上下文中的用户浏览器中执行任意 HTML 和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A