Description In Moodle 3.x, there is XSS via a calendar event name. Remediation References CVE-2018-1045 Related Vulnerabilities MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-41362) WordPress Plugin SrbTransLatin Multiple Vulnerabilities (1.46) Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0933) WordPress Plugin WordPress Affiliates-SliceWP Cross-Site Scripting (1.0.45) WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.1) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2018-1045