Skip to content
OpenAdvisories

Archive

July 2014

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low —
    CVE-2014-3544 Public exploit

    Moodle cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype I…

  • Low —
    CVE-2014-3551 Public exploit

    Moodle multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web s…