CVE-2007-3555

Name of the Vulnerable Software and Affected Versions Moodle version 1.7.1

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter of index.php.

Recommendations For Moodle version 1.7.1, consider restricting access to the search parameter in index.php to minimize the risk of exploitation. As a temporary workaround, avoid using the search parameter in the affected index.php until the issue is resolved.