Beveiligingsadvies

CVE-2014-3544

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-07-29 10:00:00
Laatst bijgewerkt 2024-08-06 10:50:16
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.