CVE-2014-3548 PUBLISHED CVSS 4.300000190734863 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog.

EPSS 0.26% · 48.8th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.26%
48.8th percentile

Affected Products

VendorProductVersions
n/an/an/a
moodlemoodle0, 2.5.0, 2.6.0
moodlemoodle0, 2.3.0, 2.3.1

Timeline

References

Open in Interactive Console →