PT-2021-3691

CVE-2021-36401

Published

2021-07-13

Updated

2025-03-07

Description by

CVSS 2.0

6.4

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description The issue is related to insufficient protection of the web page structure, allowing a remote attacker to perform cross-site scripting (XSS) attacks. Specifically, in Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers

CVE-2021-36401

BDU:2021-03924

GHSA-G6H6-4FP6-W33W

ALT-PU-2021-2215