Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2022-35651 - Vulnerability Database
Moodle

Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2022-35651

Medium
Reference: CVE-2022-35651
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-35651
Title: Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

A stored XSS and blind SSRF vulnerability was found in Moodle occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user39s browser in context of vulnerable website to steal potentially sensitive information change appearance of the web page can perform phishing and drive-by-download attacks.