https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 04:40:12 +0000 https://cve.radiocsirt.org/vuln/bit-moodle-2021-27131 <p><strong>Affected:</strong> Bitnami: moodle</p> <p>Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the &#34;Additional HTML Section&#34; via &#34;Header and Footer&#34; parameter in /admin/settings.php. This vulnerability is leading an attacker to steal admin and all user account cookies by storing the malicious XSS payload in Header and Footer. NOTE: this is disputed by the vendor because the &#34;Additional HTML Section&#34; for &#34;Header and Footer&#34; can only be supplied by an administrator, who is intentionally allowed to enter unsanitized input (e.g., site-specific JavaScript).</p> <p><strong>Affected:</strong> Bitnami: moodle</p> <p>Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the &#34;Additional HTML Section&#34; via &#34;Header and Footer&#34; parameter in /admin/settings.php. This vulnerability is leading an attacker to steal admin and all user account cookies by storing the malicious XSS payload in Header and Footer. NOTE: this is disputed by the vendor because the &#34;Additional HTML Section&#34; for &#34;Header and Footer&#34; can only be supplied by an administrator, who is intentionally allowed to enter unsanitized input (e.g., site-specific JavaScript).</p> https://cve.radiocsirt.org/vuln/bit-moodle-2021-27131 https://cve.radiocsirt.org/vuln/cnvd-2023-43862 cnvd-2023-43862 https://cve.radiocsirt.org/vuln/cnvd-2023-43862 https://cve.radiocsirt.org/vuln/euvd-2026-25321 EUVD-2026-25321 https://cve.radiocsirt.org/vuln/euvd-2026-25321 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27131 <p>Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the &#34;Additional HTML Section&#34; via &#34;Header and Footer&#34; parameter in /admin/settings.php. This vulnerability is leading an attacker to steal admin and all user account cookies by storing the malicious XSS payload in Header and Footer. NOTE: this is disputed by the vendor because the &#34;Additional HTML Section&#34; for &#34;Header and Footer&#34; can only be supplied by an administrator, who is intentionally allowed to enter unsanitized input (e.g., site-specific JavaScript).</p> <p>Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the &#34;Additional HTML Section&#34; via &#34;Header and Footer&#34; parameter in /admin/settings.php. This vulnerability is leading an attacker to steal admin and all user account cookies by storing the malicious XSS payload in Header and Footer. NOTE: this is disputed by the vendor because the &#34;Additional HTML Section&#34; for &#34;Header and Footer&#34; can only be supplied by an administrator, who is intentionally allowed to enter unsanitized input (e.g., site-specific JavaScript).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27131 https://cve.radiocsirt.org/vuln/ghsa-w2pm-fr62-jgv4 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the &#34;Additional HTML Section&#34; via &#34;Header and Footer&#34; parameter in `/admin/settings.php`. This vulnerability may lead an attacker to steal admin and all user account cookies by storing the malicious XSS payload in Header and Footer.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the &#34;Additional HTML Section&#34; via &#34;Header and Footer&#34; parameter in `/admin/settings.php`. This vulnerability may lead an attacker to steal admin and all user account cookies by storing the malicious XSS payload in Header and Footer.</p> https://cve.radiocsirt.org/vuln/ghsa-w2pm-fr62-jgv4 https://cve.radiocsirt.org/vuln/gsd-2021-27131 gsd-2021-27131 https://cve.radiocsirt.org/vuln/gsd-2021-27131 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1224 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Moodle ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Moodle ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1224