CVE-2014-3548 in Moodle
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/14/2014
Disclosure
07/29/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70490 | Moodle cross site scripting | 79 | Not defined | Official fix | CVE-2014-3548 |