Description In Moodle 3.x, there is XSS in the assignment submission page. Remediation References CVE-2017-2578 Related Vulnerabilities Drupal Core 7.x Multiple Cross-Site Scripting Vulnerabilities (7.0 - 7.85) WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Arbitrary File Upload (1.28.1) WordPress Plugin Map Block for Google Maps Unspecified Vulnerability (1.31) WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.20) silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5089) Severity Medium Classification CVE-2017-2578 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities