CVE-2014-3551 in Moodle
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/14/2014
Disclosure
07/29/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70493 | Moodle cross site scripting | 79 | Not defined | Official fix | CVE-2014-3551 |