CVE-2014-7830

no score yetEPSS 1.5%

Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-11-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47865
http://openwall.com/lists/oss-security/2014/11/17/11
http://www.securityfocus.com/bid/71119
http://www.securitytracker.com/id/1031215
https://moodle.org/mod/forum/discuss.php?d=275147

Check your stack JSON