Description
The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Remediation
References
Related Vulnerabilities
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-0553)
WordPress Plugin Gmail SMTP Arbitrary File Disclosure (1.1.0)
Undertow CVE-2023-3223 Vulnerability (CVE-2023-3223)
PHP Other Vulnerability (CVE-2007-4889)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-0218)