CVE-2009-0502

no score yetEPSS 1.2%

No CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the "Login as" feature is used to visit a MyMoodle or Blog page.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-02-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle
snoopy:snoopy

References

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
http://moodle.org/security/
http://secunia.com/advisories/33955
http://secunia.com/advisories/34418
http://www.debian.org/security/2009/dsa-1724

Check your stack JSON