CVE-2022-45151

Publication date

2022-11-23 00:00:00

Family

fedora

State

PUBLISHED

Description

The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in users browser in context of vulnerable website.