CVE-2023-46858

Summary

CVE-2023-46858 is a reflection XSS vulnerability affecting Moodle 4.3. This issue arises in the /grade/report/grader/index.php page when a teacher is logged in. Attackers can exploit this vulnerability by injecting malicious code through a specific input field, potentially gaining unauthorized access or executing malicious scripts. Notably, while students cannot directly post XSS-capable content, teachers and administrators can, increasing the risk to the entire learning platform.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.