Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-b1q7-u3cx-ukej
Summary
Cross-site Scripting
There is XSS in the Course summary filter of the "Add a new course" page.
Aliases
0
alias CVE-2017-7298
1
alias GHSA-4m6v-x9fj-847j
Fixed_packages
0
url pkg:composer/moodle/moodle@3.2.3
purl pkg:composer/moodle/moodle@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1wup-hjxg-f7g4
4
vulnerability VCID-1wzm-dhqv-43bj
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-24bp-c9yc-gua4
8
vulnerability VCID-29mv-feyq-guew
9
vulnerability VCID-2cdg-m3pq-ufe5
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2s6b-tp6p-gue1
12
vulnerability VCID-2trf-n9r4-ykgg
13
vulnerability VCID-2urf-d2qr-abdy
14
vulnerability VCID-2wsu-7rzh-h7cs
15
vulnerability VCID-2z6d-qf96-kyb4
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3mgk-4c3z-sudt
18
vulnerability VCID-3nu2-1cwj-sfdd
19
vulnerability VCID-3nvq-s7y5-fufr
20
vulnerability VCID-3yre-ft3n-2fd3
21
vulnerability VCID-44zf-1dw7-qkf5
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4spj-h1cc-rbfg
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5s33-v19s-sqd6
30
vulnerability VCID-5snb-dyv3-efe9
31
vulnerability VCID-5xhb-mx3v-fuhs
32
vulnerability VCID-61ry-zz34-8qhj
33
vulnerability VCID-657g-68tv-dkam
34
vulnerability VCID-6726-ca8y-4uez
35
vulnerability VCID-6cvg-r9am-wbh5
36
vulnerability VCID-6p1s-2r14-z7ax
37
vulnerability VCID-7p54-yn8k-aydw
38
vulnerability VCID-7rqc-eepq-43ds
39
vulnerability VCID-7trf-g8dq-tua1
40
vulnerability VCID-7x6e-qege-ufdv
41
vulnerability VCID-83kb-4mk9-t7ge
42
vulnerability VCID-893t-9cja-43g2
43
vulnerability VCID-8bzr-1mub-3ffq
44
vulnerability VCID-8d9n-ejbb-7fa1
45
vulnerability VCID-8uah-srba-6ubb
46
vulnerability VCID-95f1-6g3r-rkg4
47
vulnerability VCID-9nd7-4wve-97hc
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9xk9-qb9x-jfcs
50
vulnerability VCID-a1ek-x154-5ydy
51
vulnerability VCID-a6pb-47tu-afcg
52
vulnerability VCID-ajkr-fxa1-mkhk
53
vulnerability VCID-ajrr-8392-kkcw
54
vulnerability VCID-b3vw-8hzh-dybx
55
vulnerability VCID-b7br-bh2d-rygp
56
vulnerability VCID-bju3-sj3y-83e3
57
vulnerability VCID-cbzx-gnhr-pfap
58
vulnerability VCID-ckg1-9vpt-yfdk
59
vulnerability VCID-cs5n-4bst-zfcj
60
vulnerability VCID-d8gp-tuxy-3qdf
61
vulnerability VCID-d92c-j4yy-fud3
62
vulnerability VCID-dky9-v96e-pubh
63
vulnerability VCID-dp61-6ban-cyda
64
vulnerability VCID-duna-st9c-mqbk
65
vulnerability VCID-dvrf-62nt-2kdp
66
vulnerability VCID-efq2-s2df-pqa1
67
vulnerability VCID-eu27-a3px-87ed
68
vulnerability VCID-evef-t6cx-vqcc
69
vulnerability VCID-f1da-1duc-2uhb
70
vulnerability VCID-fegs-ubsk-63hu
71
vulnerability VCID-ffp4-23na-rkgr
72
vulnerability VCID-g3km-hbas-x3cg
73
vulnerability VCID-g8ct-c4ce-zuaf
74
vulnerability VCID-g9f7-787g-vyem
75
vulnerability VCID-gwnb-e3gt-kqcb
76
vulnerability VCID-gycn-bey2-4yam
77
vulnerability VCID-gzdw-424p-mqfa
78
vulnerability VCID-heb8-damy-47e5
79
vulnerability VCID-hk13-uc46-87h1
80
vulnerability VCID-hkef-37rz-4baf
81
vulnerability VCID-hmuw-bjax-37bz
82
vulnerability VCID-hufb-p6pa-63c9
83
vulnerability VCID-hwnq-6kng-kkcx
84
vulnerability VCID-j3ts-5ghc-4qct
85
vulnerability VCID-jcq6-btgz-fkf6
86
vulnerability VCID-jfsu-ya7r-h3e1
87
vulnerability VCID-jkyc-esnt-p3ay
88
vulnerability VCID-m2a7-q28u-1yfw
89
vulnerability VCID-m3jj-r66a-d7cv
90
vulnerability VCID-m3np-aebb-8qaa
91
vulnerability VCID-m4zv-e3dn-budf
92
vulnerability VCID-m69v-z66h-kugf
93
vulnerability VCID-m9tk-fa8m-zbah
94
vulnerability VCID-mhh7-n7ut-hkh6
95
vulnerability VCID-mkfz-e1ft-2bcw
96
vulnerability VCID-mnx8-118d-efcr
97
vulnerability VCID-ms4e-v5zc-9kgc
98
vulnerability VCID-n7d3-j3jn-rqfc
99
vulnerability VCID-nc2j-pay7-ryab
100
vulnerability VCID-nntc-dsz1-e3fp
101
vulnerability VCID-nxy4-wr2t-e7fw
102
vulnerability VCID-p2gd-7uam-mqf8
103
vulnerability VCID-p3ge-1cqt-tufw
104
vulnerability VCID-pd2f-4kxt-bkgp
105
vulnerability VCID-pged-191y-quhm
106
vulnerability VCID-q2fa-jymp-c3bb
107
vulnerability VCID-qabh-bpmn-1ye5
108
vulnerability VCID-qfvz-hf8h-8bb3
109
vulnerability VCID-qhv1-wgpm-7fh6
110
vulnerability VCID-qruy-fs4p-43h1
111
vulnerability VCID-qw4y-q2gg-akea
112
vulnerability VCID-r1ug-e8x6-83gt
113
vulnerability VCID-r4m3-9prr-dkby
114
vulnerability VCID-r5w9-cbyk-hqc6
115
vulnerability VCID-rm2q-xde7-a3ej
116
vulnerability VCID-ry6t-xcsq-4bf2
117
vulnerability VCID-rzbf-yc44-6bdb
118
vulnerability VCID-sdxf-f1b3-t3cc
119
vulnerability VCID-sgdq-5ha7-nfh2
120
vulnerability VCID-t8vm-tfnq-5kak
121
vulnerability VCID-tb5z-bfmc-zkgh
122
vulnerability VCID-team-9wba-yufc
123
vulnerability VCID-tgs8-3n7x-cyc1
124
vulnerability VCID-u32t-89zc-v3gj
125
vulnerability VCID-ueyy-v42v-7ydh
126
vulnerability VCID-uhc9-p93a-gbau
127
vulnerability VCID-umd1-pmr4-4bgs
128
vulnerability VCID-vsrk-zp7j-w7bk
129
vulnerability VCID-vve8-f9s9-v7ft
130
vulnerability VCID-w9ca-exua-g7ar
131
vulnerability VCID-wby4-h9ud-1yh5
132
vulnerability VCID-wwny-t2ez-y3e1
133
vulnerability VCID-wwx4-ns21-k3hd
134
vulnerability VCID-wytb-bryq-yqb4
135
vulnerability VCID-x1pc-1kuc-kug2
136
vulnerability VCID-x7rg-rsb5-pya7
137
vulnerability VCID-y4g2-328f-qbge
138
vulnerability VCID-y8up-cqtu-jkdw
139
vulnerability VCID-yby1-g45r-rugg
140
vulnerability VCID-yc6t-am1p-x3ev
141
vulnerability VCID-yghg-775s-vber
142
vulnerability VCID-ykj6-ptd4-7qfs
143
vulnerability VCID-yp82-zj5g-pbaf
144
vulnerability VCID-ytd5-2swj-wkh1
145
vulnerability VCID-yxag-fghx-47ej
146
vulnerability VCID-z29a-xpcq-p7ct
147
vulnerability VCID-z5u9-5522-h7fx
148
vulnerability VCID-zgzm-wj81-jkah
149
vulnerability VCID-zjqu-hbpf-9qe1
150
vulnerability VCID-zjrq-np3y-hua5
151
vulnerability VCID-zrjj-atms-8uf9
152
vulnerability VCID-ztjp-76rp-hfhk
153
vulnerability VCID-zwkk-zazw-6fgg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.3
Affected_packages
0
url pkg:composer/moodle/moodle@3.2.2
purl pkg:composer/moodle/moodle@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1wup-hjxg-f7g4
4
vulnerability VCID-1wzm-dhqv-43bj
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-24bp-c9yc-gua4
8
vulnerability VCID-29mv-feyq-guew
9
vulnerability VCID-2cdg-m3pq-ufe5
10
vulnerability VCID-2dxb-v1af-jbax
11
vulnerability VCID-2gtq-u4jg-4uck
12
vulnerability VCID-2s6b-tp6p-gue1
13
vulnerability VCID-2trf-n9r4-ykgg
14
vulnerability VCID-2urf-d2qr-abdy
15
vulnerability VCID-2wsu-7rzh-h7cs
16
vulnerability VCID-2z6d-qf96-kyb4
17
vulnerability VCID-3ept-fdps-5fe5
18
vulnerability VCID-3mgk-4c3z-sudt
19
vulnerability VCID-3nu2-1cwj-sfdd
20
vulnerability VCID-3nvq-s7y5-fufr
21
vulnerability VCID-3yre-ft3n-2fd3
22
vulnerability VCID-44zf-1dw7-qkf5
23
vulnerability VCID-4c9d-jf9g-u3gn
24
vulnerability VCID-4spj-h1cc-rbfg
25
vulnerability VCID-4zvp-nmrk-4qbq
26
vulnerability VCID-57wg-wxss-jbaw
27
vulnerability VCID-5ba5-pee7-6kh1
28
vulnerability VCID-5bfe-hk7m-7bh6
29
vulnerability VCID-5q1e-b4e8-jbc8
30
vulnerability VCID-5rbf-4dz3-2qdz
31
vulnerability VCID-5s33-v19s-sqd6
32
vulnerability VCID-5snb-dyv3-efe9
33
vulnerability VCID-5xhb-mx3v-fuhs
34
vulnerability VCID-61ry-zz34-8qhj
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-7p54-yn8k-aydw
40
vulnerability VCID-7rqc-eepq-43ds
41
vulnerability VCID-7trf-g8dq-tua1
42
vulnerability VCID-7x6e-qege-ufdv
43
vulnerability VCID-83kb-4mk9-t7ge
44
vulnerability VCID-893t-9cja-43g2
45
vulnerability VCID-8bzr-1mub-3ffq
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-95f1-6g3r-rkg4
49
vulnerability VCID-9nd7-4wve-97hc
50
vulnerability VCID-9rqr-xzr8-5fgf
51
vulnerability VCID-9xk9-qb9x-jfcs
52
vulnerability VCID-a1ek-x154-5ydy
53
vulnerability VCID-a6pb-47tu-afcg
54
vulnerability VCID-ajkr-fxa1-mkhk
55
vulnerability VCID-ajrr-8392-kkcw
56
vulnerability VCID-b1q7-u3cx-ukej
57
vulnerability VCID-b3vw-8hzh-dybx
58
vulnerability VCID-b7br-bh2d-rygp
59
vulnerability VCID-bju3-sj3y-83e3
60
vulnerability VCID-cbzx-gnhr-pfap
61
vulnerability VCID-ckg1-9vpt-yfdk
62
vulnerability VCID-cs5n-4bst-zfcj
63
vulnerability VCID-d8gp-tuxy-3qdf
64
vulnerability VCID-d92c-j4yy-fud3
65
vulnerability VCID-dky9-v96e-pubh
66
vulnerability VCID-dp61-6ban-cyda
67
vulnerability VCID-duna-st9c-mqbk
68
vulnerability VCID-dvrf-62nt-2kdp
69
vulnerability VCID-efq2-s2df-pqa1
70
vulnerability VCID-eu27-a3px-87ed
71
vulnerability VCID-evef-t6cx-vqcc
72
vulnerability VCID-f1da-1duc-2uhb
73
vulnerability VCID-fegs-ubsk-63hu
74
vulnerability VCID-ffp4-23na-rkgr
75
vulnerability VCID-g3km-hbas-x3cg
76
vulnerability VCID-g8ct-c4ce-zuaf
77
vulnerability VCID-g9f7-787g-vyem
78
vulnerability VCID-gwnb-e3gt-kqcb
79
vulnerability VCID-gycn-bey2-4yam
80
vulnerability VCID-gzdw-424p-mqfa
81
vulnerability VCID-heb8-damy-47e5
82
vulnerability VCID-hk13-uc46-87h1
83
vulnerability VCID-hkef-37rz-4baf
84
vulnerability VCID-hmuw-bjax-37bz
85
vulnerability VCID-hufb-p6pa-63c9
86
vulnerability VCID-hwnq-6kng-kkcx
87
vulnerability VCID-j3ts-5ghc-4qct
88
vulnerability VCID-jcq6-btgz-fkf6
89
vulnerability VCID-jfsu-ya7r-h3e1
90
vulnerability VCID-jkyc-esnt-p3ay
91
vulnerability VCID-m2a7-q28u-1yfw
92
vulnerability VCID-m3jj-r66a-d7cv
93
vulnerability VCID-m3np-aebb-8qaa
94
vulnerability VCID-m4zv-e3dn-budf
95
vulnerability VCID-m69v-z66h-kugf
96
vulnerability VCID-m9tk-fa8m-zbah
97
vulnerability VCID-mhh7-n7ut-hkh6
98
vulnerability VCID-mkfz-e1ft-2bcw
99
vulnerability VCID-mnx8-118d-efcr
100
vulnerability VCID-ms4e-v5zc-9kgc
101
vulnerability VCID-n7d3-j3jn-rqfc
102
vulnerability VCID-nc2j-pay7-ryab
103
vulnerability VCID-nntc-dsz1-e3fp
104
vulnerability VCID-nxy4-wr2t-e7fw
105
vulnerability VCID-p2gd-7uam-mqf8
106
vulnerability VCID-p3ge-1cqt-tufw
107
vulnerability VCID-pd2f-4kxt-bkgp
108
vulnerability VCID-pged-191y-quhm
109
vulnerability VCID-q2fa-jymp-c3bb
110
vulnerability VCID-qabh-bpmn-1ye5
111
vulnerability VCID-qfvz-hf8h-8bb3
112
vulnerability VCID-qhv1-wgpm-7fh6
113
vulnerability VCID-qruy-fs4p-43h1
114
vulnerability VCID-qw4y-q2gg-akea
115
vulnerability VCID-r1ug-e8x6-83gt
116
vulnerability VCID-r4m3-9prr-dkby
117
vulnerability VCID-r5w9-cbyk-hqc6
118
vulnerability VCID-rm2q-xde7-a3ej
119
vulnerability VCID-ry6t-xcsq-4bf2
120
vulnerability VCID-rzbf-yc44-6bdb
121
vulnerability VCID-sdxf-f1b3-t3cc
122
vulnerability VCID-sgdq-5ha7-nfh2
123
vulnerability VCID-t8vm-tfnq-5kak
124
vulnerability VCID-tb5z-bfmc-zkgh
125
vulnerability VCID-team-9wba-yufc
126
vulnerability VCID-tgs8-3n7x-cyc1
127
vulnerability VCID-u32t-89zc-v3gj
128
vulnerability VCID-ueyy-v42v-7ydh
129
vulnerability VCID-uhc9-p93a-gbau
130
vulnerability VCID-umd1-pmr4-4bgs
131
vulnerability VCID-vsrk-zp7j-w7bk
132
vulnerability VCID-vtq4-fpr8-hudb
133
vulnerability VCID-vve8-f9s9-v7ft
134
vulnerability VCID-w9ca-exua-g7ar
135
vulnerability VCID-wby4-h9ud-1yh5
136
vulnerability VCID-wwny-t2ez-y3e1
137
vulnerability VCID-wwx4-ns21-k3hd
138
vulnerability VCID-wytb-bryq-yqb4
139
vulnerability VCID-x1pc-1kuc-kug2
140
vulnerability VCID-x7rg-rsb5-pya7
141
vulnerability VCID-y4g2-328f-qbge
142
vulnerability VCID-y8up-cqtu-jkdw
143
vulnerability VCID-yby1-g45r-rugg
144
vulnerability VCID-yc6t-am1p-x3ev
145
vulnerability VCID-yghg-775s-vber
146
vulnerability VCID-ykj6-ptd4-7qfs
147
vulnerability VCID-yp82-zj5g-pbaf
148
vulnerability VCID-ytd5-2swj-wkh1
149
vulnerability VCID-yxag-fghx-47ej
150
vulnerability VCID-z29a-xpcq-p7ct
151
vulnerability VCID-z5u9-5522-h7fx
152
vulnerability VCID-zgzm-wj81-jkah
153
vulnerability VCID-zjqu-hbpf-9qe1
154
vulnerability VCID-zjrq-np3y-hua5
155
vulnerability VCID-zrjj-atms-8uf9
156
vulnerability VCID-ztjp-76rp-hfhk
157
vulnerability VCID-zwkk-zazw-6fgg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7298
reference_id
reference_type
scores
0
value 0.00243
scoring_system epss
scoring_elements 0.47785
published_at 2026-06-04T12:55:00Z
1
value 0.00243
scoring_system epss
scoring_elements 0.47851
published_at 2026-06-06T12:55:00Z
2
value 0.00243
scoring_system epss
scoring_elements 0.47848
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7298
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url http://www.daimacn.com/index.php/post/12.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.daimacn.com/index.php/post/12.html
3
reference_url http://www.daimacn.com/post/12.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.daimacn.com/post/12.html
4
reference_url http://www.securityfocus.com/bid/97182
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/97182
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7298
reference_id CVE-2017-7298
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-7298
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-b1q7-u3cx-ukej