Detections
Analytics
CVE-2014-3551
medium
Description
Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.
References
https://github.com/advisories/GHSA-m8f5-9wg8-2c3h
https://github.com/JavaGarcia/CVE-2014-3551
https://moodle.org/mod/forum/discuss.php?d=264273
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4522
http://www.securityfocus.com/bid/68763
http://openwall.com/lists/oss-security/2014/07/21/1
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46223