Beveiligingsadvies

CVE-2018-14631

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-09-17 20:00:00

Laatst bijgewerkt 2024-08-05 09:29:51

Toegewezen door redhat

CVSS-score 8.8

Status PUBLISHED

Beschrijving

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user followed a malicious link containing JavaScript in the search parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗