Description

Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.

Remediation

References

CVE-2023-35131

Related Vulnerabilities

WordPress Plugin WooCommerce Arbitrary File Deletion (3.4.5)

WordPress Plugin WP fail2ban Security Bypass (4.0.2)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5097)

WordPress Plugin Async JavaScript Cross-Site Scripting (2.20.12.09)

WordPress Plugin RSS Feed Reader 'rss_url' Parameter Cross-Site Scripting (0.1)

Severity

Medium

Classification

CVE-2023-35131 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities