CVE-2009-0500

no score yetEPSS 1.2%

moodle moodle: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-02-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
http://moodle.org/security/
http://secunia.com/advisories/33955
http://secunia.com/advisories/34418
http://www.debian.org/security/2009/dsa-1724

Check your stack JSON