← All advisories

Medium severity5.4NVD Advisory· Published Jun 16, 2021· Updated Jun 17, 2026

CVE-2021-32244

CVE-2021-32244

Description

Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Moodle/Moodle2 versions
cpe:2.3:a:moodle:moodle:3.10.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:moodle:moodle:3.10.3:*:*:*:*:*:*:*
- (no CPE)
osv-coords2 versions
pkg:bitnami/moodle pkg:composer/moodle/moodle
>= 3.10.3, < 3.10.4+ 1 more
- (no CPE)range: >= 3.10.3, < 3.10.4
- (no CPE)

Patches

Vulnerability mechanics

References

3

github.com/langkexiansheng/Images/blob/master/moodle_xss.gifnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-g5m5-j48g-fr24ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-32244ghsaADVISORY

News mentions

0

No linked articles in our index yet.