CVE-2024-33998

5.4

MEDIUMCVSS v3

Published

May 31, 2024

Affected

6 projects

Assigned by

Severity scale

010

Description

Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.

GitHubMoodle - the world's open source learning platform

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

Crates.ioMoodle Webservice Client in Rust.

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

NPM

Model module for node for use with both mongodb and mysql.

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

Python Package IndexMoodle web services connection library

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

RubyGemsInteract with Moodle from ruby

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

GitHubModel module for node for use with both mongodb and mysql.

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD