Description

Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.

Remediation

References

CVE-2023-35131

Related Vulnerabilities

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44949)

WordPress 5.5.x PHP Object Injection (5.5 - 5.5.4)

WordPress Plugin Scribble Maps Cross-Site Scripting (1.2)

Oracle Database Server CVE-2014-4299 Vulnerability (CVE-2014-4299)

PostgreSQL Incorrect Authorization Vulnerability (CVE-2021-20229)

Severity

Medium

Classification

CVE-2023-35131 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities