Skip to content
OpenAdvisories

Product · [UNKNOWN]

moodle

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2019-3847 Public exploit

    Moodle XSS Vulnerability

    A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to t…

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2019-3810 Public exploit EPSS 14%

    Moodle XSS Vulnerability

    A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is …

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2018-16854 Public exploit

    Moodle Login CSRF vulnerability in login form

    A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15.

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist