Vulnerability Bulletins |
MSA-17-0008: XSS in evidence of prior learning |
|
| Affected software | PHP |
|
by Marina Glancy. Description:Registered user could submit evidence of prior learning that includes XSS that will be executed for another user who tried to edit the same evidenceIssue summary:XSS in evidence of prior learningSeverity/Risk:MinorVersions affected:3.2 to 3.2.1 and 3.1 to 3.1.4Versions fixed:3.2.2 and 3.1.5Reported by:Jaymark PestañoIssue no.:MDL-57596CVE identifier:CVE-2017-2644Changes More info: https://moodle.org/mod/forum/discuss.php?d=349421&parent=1409807 |
|