QwikSec

Security Database

CVE

CWE

Training

CVE-2022-45151

Published: Nov 23, 2022

Modified: Apr 25, 2025

PUBLISHED

Description

The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Vendor	Product	Versions
n/a	Moodle	affected `Fixed in moodle 4.0.5, moodle 3.11.11`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2142774

https://moodle.org/mod/forum/discuss.php?d=440771

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76131

FEDORA-2022-f7fdcb1820

vendor-advisory

FEDORA-2022-cb7084ae1c

vendor-advisory

FEDORA-2022-74a9c8e95f

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.