https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:19:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04908 bdu:2022-04908 https://cve.radiocsirt.org/vuln/bdu:2022-04908 https://cve.radiocsirt.org/vuln/bit-moodle-2022-35653 <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> https://cve.radiocsirt.org/vuln/bit-moodle-2022-35653 https://cve.radiocsirt.org/vuln/certfr-2022-avi-653 certfr-2022-avi-653 https://cve.radiocsirt.org/vuln/certfr-2022-avi-653 https://cve.radiocsirt.org/vuln/cnvd-2022-54914 cnvd-2022-54914 https://cve.radiocsirt.org/vuln/cnvd-2022-54914 https://cve.radiocsirt.org/vuln/euvd-2026-18230 EUVD-2026-18230 https://cve.radiocsirt.org/vuln/euvd-2026-18230 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35653 <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-35653 https://cve.radiocsirt.org/vuln/ghsa-62wh-m4jr-233r <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> https://cve.radiocsirt.org/vuln/ghsa-62wh-m4jr-233r https://cve.radiocsirt.org/vuln/gsd-2022-35653 gsd-2022-35653 https://cve.radiocsirt.org/vuln/gsd-2022-35653 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-35653 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user&#39;s browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-35653