Description

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.

Remediation

References

CVE-2022-30597

Related Vulnerabilities

WordPress Plugin Podcast Subscribe Buttons Cross-Site Scripting (1.4.1)

WordPress Plugin GS Filterable Portfolio Cross-Site Scripting (1.6.0)

WordPress Plugin Image Gallery with Slideshow 'upload-file.php' Arbitrary File Upload (1.5)

WordPress Plugin Event Calendar WD-Responsive Event Calendar Cross-Site Scripting (1.1.44)

SharePoint CVE-2022-41060 Vulnerability (CVE-2022-41060)

Severity

Medium

Classification

CVE-2022-30597 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities