Description
The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Published: 2022-11-23
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-7467 The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social" user profile fields. An attacker could inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Github GHSA Github GHSA GHSA-xv72-6pgh-cjj8 Moodle stored-XSS vulnerability in some "social" user profile fields
History

Fri, 25 Apr 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Fedoraproject Fedora
Moodle Moodle
cve-icon MITRE

Status: PUBLISHED

Assigner: fedora

Published:

Updated: 2025-04-25T19:28:48.118Z

Reserved: 2022-11-11T00:00:00.000Z

Link: CVE-2022-45151

cve-icon Vulnrichment

Updated: 2024-08-03T14:09:56.164Z

cve-icon NVD

Status : Modified

Published: 2022-11-23T15:15:10.923

Modified: 2025-04-25T20:15:36.237

Link: CVE-2022-45151

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses