{"id":"GHSA-g5m5-j48g-fr24","aliases":["BIT-moodle-2021-32244","CVE-2021-32244"],"title":"Moodle Cross Site Scripting (XSS)","description":"Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the \"Description\" field.","severity":"medium","score":5.4,"published":"2022-05-24T19:05:25.000Z","modified":"2024-04-24T17:57:14.861Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","ranges":[],"versions":["3.10.3"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-32244","https://github.com/langkexiansheng/Images/blob/master/moodle_xss.gif","https://github.com/moodle/moodle"],"sources":[{"name":"OSV","id":"GHSA-g5m5-j48g-fr24","modified":"2024-04-24T17:57:14.861767Z","url":"https://osv.dev/vulnerability/GHSA-g5m5-j48g-fr24"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4}]}