Threats tagged 'bit-moodle-2024-37674'

A Cross Site Scripting (XSS) vulnerability exists in Moodle CMS version 3.10, allowing a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity. This vulnerability affects Moodle versions from 3.10.0 up to but not including 4.1.10. A patch is available to address this issue. The severity is assessed as medium based on the available information.