Nightbloodz

**Name of the Vulnerable Software and Affected Versions** Moodle (affected versions not specified) **Description** Insufficient sanitization of description information displayed in the site administration live log allows a remote attacker to perform a stored Cross-Site Scripting (XSS) attack. XSS is a technique where malicious scripts are injected into trusted websites, which are then executed in the browser of the user viewing the page. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.