VYPR
← All advisories
Medium severity6.1NVD Advisory· Published May 10, 2026· Updated Jul 25, 2026

CVE-2022-50943

CVE-2022-50943

Description

Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Moodle/Moodle2 versions
    cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: <=4.0.0
    • (no CPE)range: <4.0
  • osv-coords
    pkg:bitnami/moodle
    Range: <= 4.0.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.