CVE-2014-2571 PUBLISHED CVSS 3.5 LOW

Cross-site scripting (XSS) vulnerability in the quiz_question_tostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a quiz question.

EPSS 0.21% · 43.1th percentile

Risk Scores

CVSS v2.0
3.5
EPSS Score
0.21%
43.1th percentile

Affected Products

VendorProductVersions
moodlemoodle2.6.1, 2.5.2, 2.5.3
n/an/an/a
moodlemoodle0, 2.5.0, 2.6.0

Timeline

References

Open in Interactive Console →