CVE-2014-3550

Publication date 29 July 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task.

Status

Package Ubuntu Release Status
moodle 14.04 LTS trusty Not in release
12.04 LTS precise
Not affected
10.04 LTS lucid
Not affected