CVE-2014-7830: XSS
Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7830?
CVE-2014-7830 is classified as a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2014-7830?
To fix CVE-2014-7830, update your Moodle installation to version 2.7.3 or later, 2.6.6 or later, or 2.5.9 or later.
Which software versions are affected by CVE-2014-7830?
CVE-2014-7830 affects Moodle versions up to 2.4.11 and various releases of 2.5.x, 2.6.x, and 2.7.x before the specified patches.
What type of attack can be executed with CVE-2014-7830?
CVE-2014-7830 allows remote authenticated users to execute arbitrary web scripts or HTML via cross-site scripting (XSS).
Who is impacted by CVE-2014-7830?
Remote authenticated users on vulnerable Moodle versions are impacted by CVE-2014-7830.