Total vulnerabilities in the database
The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
| Software | From | Fixed in |
|---|---|---|
| moodle / moodle | 3.11.0 | 3.11.11 |
| moodle / moodle | 4.0.0 | 4.0.5 |
| fedoraproject / fedora | 35 | 35.x |
| fedoraproject / fedora | 36 | 36.x |
| fedoraproject / fedora | 37 | 37.x |