CVE-2024-34006

Published: May 31, 2024

Modified: Aug 2, 2024

PUBLISHED

Description

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

Vendor	Product	Versions
Unknown	Moodle	affected `4.0 - <= 4.3.3` affected `4.2 - <= 4.2.6` affected `4.1 - <= 4.1.9`

Weaknesses (CWE)

CWE-838

References

https://moodle.org/mod/forum/discuss.php?d=458395

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-34006

Description

Affected Products

Weaknesses (CWE)

References