Archive
17 July 2017
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Medium 5.4
Bolt CMS Stored XSS
Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
-
Medium 5.4
Bolt stored Cross-site Scripting (XSS)
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
-
Medium 6.5
Moodle Improper Privilege Management
In Moodle 3.x, course creators are able to change system default settings for courses.
-
Medium 4.3
Moodle Information Disclosure
In Moodle 3.3, the course overview block reveals activities in hidden courses.
-
Medium 6.5
Moodle User fullname disclosure on user preferences page
Moodle 3.x has user fullname disclosure on the user preferences page.