moodle: cross-site scripting
| Package(s): | moodle | CVE #(s): | CVE-2015-0216 | ||||
| Created: | February 16, 2015 | Updated: | February 18, 2015 | ||||
| Description: | From the Red Hat bugzilla:
MSA-15-0006: Capability to grade Lesson module is missing XSS bitmask Description: Users with capability to grade in Lesson module were not reported as users with XSS risk but their feedback was displayed without cleaning Issue summary: mod/lesson:grade capability missing RISK_XSS but essay feedback is displayed with noclean=true
Severity/Risk: Minor | ||||||
| Alerts: |
| ||||||