Description

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.

Remediation

References

CVE-2017-7298

Related Vulnerabilities

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-58150)

Pega Infinity Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-27654)

WordPress Plugin PWA for WP & AMP Unspecified Vulnerability (1.0.8)

phpBB Improper Input Validation Vulnerability (CVE-2019-9826)

e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-50916)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2017-7298