Threats tagged 'bit-moodle-2024-34000'

A stored cross-site scripting (XSS) vulnerability exists in Moodle's lesson overview report due to insufficient sanitization of user ID numbers. This flaw allows malicious scripts to be stored and potentially executed when the lesson overview report is viewed. The vulnerability affects multiple Moodle versions prior to specific patched releases. A patch is available to address this issue. No known exploits are currently reported in the wild.