Cross-Site Scripting Vulnerability in Moodle Learning Platform

CVE-2017-2645

Summary

In Moodle version 3.x, an XSS vulnerability arises from the way the platform handles attachments to evidence of prior learning. Malicious actors can exploit this flaw to execute arbitrary scripts, potentially compromising user sessions and allowing for unauthorized actions. Proper sanitization and validation of inputs are critical to mitigate such risks.

References