Blind XSS Vulnerability in Moodle LMS by Moodle

CVE-2019-14881

What is CVE-2019-14881?

A vulnerability exists in Moodle LMS version 3.7 prior to 3.7.3 that allows for blind cross-site scripting (XSS) attacks. This security flaw occurs in areas where user email addresses are displayed, potentially enabling attackers to exploit this weakness to execute malicious scripts, targeting users without their consent. It underscores the critical need for users to update their installations promptly and apply necessary security patches to safeguard against such vulnerabilities.

References