CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback

Description

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Moodle 3.x	Versions non publiées

Autres CVE de Moodle 3.x

Les 10 CVE de Moodle 3.x →

CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker Non notée CVE-2018-1043 In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames Non notée CVE-2018-1044 In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings Non notée CVE-2018-1045 In Moodle 3.x, there is XSS via a calendar event name Non notée