Packagist/moodle/moodle CVE-2024-28593: medium 5.4, EPSS 0.55%
Cross-site Scripting in Moodle Chat
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-f6mh-79vh-2hv7
- https://nvd.nist.gov/vuln/detail/CVE-2024-28593
- https://docs.moodle.org/403/en/Using_Chat
- https://gist.githubusercontent.com/minendie/4f23174687bc4d8eb7f727d9959b5399/raw/9ce573cebcce5521d9d6f826ab68f3780036b874/CVE-2024-28593.txt
- https://github.com/moodle/moodle
- https://medium.com/%40lamscun/how-do-i-change-htmli-from-low-to-critical-your-email-box-is-safe-e7171efd88fe
CVE-2024-28593 · published · modified · JSON