Threats tagged 'bit-moodle-2024-38274'

A stored cross-site scripting (XSS) vulnerability exists in Moodle's calendar feature due to insufficient escaping of event titles in the event deletion prompt. This vulnerability affects multiple Moodle versions prior to their respective patches. Exploiting this flaw could allow an attacker to inject malicious scripts that execute in the context of a user's browser when they interact with the event deletion prompt.