Description

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.

Remediation

References

CVE-2017-7298

Related Vulnerabilities

Adobe Coldfusion 8 multiple linked XSS vulnerabilies

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29201)

WordPress Plugin Sidekick Multiple Unspecified Vulnerabilities (2.2.1)

YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4941)

WordPress Plugin WebP Express Unspecified Vulnerability (0.14.21)

Severity

Medium

Classification

CVE-2017-7298 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities