← CVE Intelligence

CVE-2024-34006

moodle: unsanitized HTML in site log for config_log_created PUBLISHED

Description (CNA)

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 4.0 through 4.3.3; affected 4.2 through 4.2.6; affected 4.1 through 4.1.9

CWE

CWE-838

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.