Description
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in blog search. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks.
Remediation
References
Related Vulnerabilities
Dolibarr Files or Directories Accessible to External Parties Vulnerability (CVE-2023-33568)
OpenVPN AS Insufficient Session Expiration Vulnerability (CVE-2020-15074)
WordPress Plugin Author Bio Box Cross-Site Scripting (3.3.1)
WordPress Plugin Wordpress Picture/Portfolio/Media Gallery Server-Side Request Forgery (3.0.1)