Packagist/moodle/moodle CVE-2015-5336: medium 5.4, EPSS 0.87%

Moodle multiple cross-site scripting (XSS) vulnerabilities

Action: Upgrade moodle/moodle to 2.7.11 or later.

composer require moodle/moodle:2.7.11

composer require moodle/moodle:2.8.9

composer require moodle/moodle:2.9.3

Affected

Fixed versions

Sources

• osv: GHSA-grvw-qq2j-r898
• https://nvd.nist.gov/vuln/detail/CVE-2015-5336
• https://github.com/moodle/moodle/commit/12c232df76885effa5ebac08e3094d6db5aa9223
• https://github.com/moodle/moodle/commit/31d0bf81af079bc285ea439ac5160f9e45697c88
• https://github.com/moodle/moodle/commit/48d8989f13a6320c54b05f7d3ea552356cf85ed6
• https://github.com/moodle/moodle/commit/86cec86942c1cfcb92b840afd18deed9b9a34951
• https://github.com/moodle/moodle/commit/b4f4232e1cf76334e4b8dda9cf68962b121e6bc0
• https://github.com/moodle/moodle/commit/f03ec4ce85b3d361429d9f66dbbb478a353640c9
• https://github.com/moodle/moodle/commit/fd14d2902fab15fa6affecc427bb11d3869d9afe
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=323231
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49940

CVE-2015-5336 · published 2022-05-13T01:12:47Z · modified 2024-02-16T08:01:54.623402Z · JSON