← All advisories

Moderate severityNVD Advisory· Published Jun 16, 2021· Updated Aug 3, 2024

CVE-2021-32244

CVE-2021-32244

Description

Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Moodle/Moodledescription
osv-coords2 versions
pkg:bitnami/moodle pkg:composer/moodle/moodle
>= 3.10.3, < 3.10.4+ 1 more
- (no CPE)range: >= 3.10.3, < 3.10.4
- (no CPE)

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

github.com/advisories/GHSA-g5m5-j48g-fr24ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-32244ghsaADVISORY
github.com/langkexiansheng/Images/blob/master/moodle_xss.gifghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.