CVE-2014-3544 PUBLISHED CVSS 3.5 LOW

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.

EPSS 0.82% · 74.2th percentile

Risk Scores

CVSS v2.0
3.5
EPSS Score
0.82%
74.2th percentile

Affected Products

VendorProductVersions
moodlemoodle2.6.0, 2.7.0, 0
n/an/an/a
moodlemoodle2.4.4, 2.4.5, 2.4.6

Timeline

References

Open in Interactive Console →