CVE-2022-45150

No indexed exploits for CVE-2022-45150 yet

A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitization of user-supplied data in policy tool. An attacker can trick the victim to open a specially crafted link that executes an arbitrary HTML and script code in user's browser in context of vulnerable website. This vulnerability may allow an attacker to perform cross-site scripting (XSS) attacks to gain access potentially sensitive information and modification of web pages.

Affected products: Alt Linux, Moodle, Red Os
Moodle: < 3.9.18, 3.11.11, 4.0.5

CVSS 3.1: 6.1 MEDIUM
EPSS: 0.7% (48th percentile)
Weakness: CWE-79
NVD status: Modified
Published: 2022-11-23

CVE-2022-45150 at NVD

Authoritative description, scoring and affected products

No exploit for CVE-2022-45150 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.