Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:35:50 +0000 CERTFR-2014-AVI-485 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 fkie_cve-2014-7830 https://vulnerability.circl.lu/vuln/fkie_cve-2014-7830 <p>Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.</p> <p>Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2014-7830 GHSA-j4mr-vc54-h5pc — Moodle cross-site scripting (XSS) vulnerability https://vulnerability.circl.lu/vuln/ghsa-j4mr-vc54-h5pc <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.</p> https://vulnerability.circl.lu/vuln/ghsa-j4mr-vc54-h5pc gsd-2014-7830 https://vulnerability.circl.lu/vuln/gsd-2014-7830 gsd-2014-7830 https://vulnerability.circl.lu/vuln/gsd-2014-7830