CVE-2024-34006

—

CVSS 3.1

4.3 medium

EPSS

<1%p28

Published

May 31, 2024 (May 31, 2024)

Modified

Jun 17, 2026

Description

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

Vendors: moodle
Products: moodle
Weakness: CWE-838
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.