{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.10.9"}],"component":"moodle/moodle","cve_ids":["CVE-2024-29374"],"ecosystem":"Packagist","epss":0.00533,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3qw5-v9cc-v262","id":"tcs_01M5KET8ECY4MB2G67S8M0GY2Q","modified_at":"2025-05-02T06:58:56.470211Z","published_at":"2024-03-21T21:31:15Z","references":["https://osv.dev/vulnerability/GHSA-3qw5-v9cc-v262","https://nvd.nist.gov/vuln/detail/CVE-2024-29374","https://gist.github.com/fir3storm/f9c7f3ec1a6496498517ed216d2640b2","https://github.com/moodle/moodle"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-3qw5-v9cc-v262","url":"https://osv.dev/vulnerability/GHSA-3qw5-v9cc-v262"}],"summary":"Cross site scripting in moodle"}