Search for vulnerabilities
Vulnerability details: VCID-3jvu-fzx7-6bhp
Vulnerability ID VCID-3jvu-fzx7-6bhp
Aliases CVE-2015-3275
GHSA-6922-5v25-p8jg
Summary Moodle multiple cross-site scripting (XSS) vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 6.1 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50614
generic_textual MODERATE http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50614
cvssv3.1 6.1 http://openwall.com/lists/oss-security/2015/07/13/2
generic_textual MODERATE http://openwall.com/lists/oss-security/2015/07/13/2
epss 0.00255 https://api.first.org/data/v1/epss?cve=CVE-2015-3275
epss 0.00255 https://api.first.org/data/v1/epss?cve=CVE-2015-3275
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-6922-5v25-p8jg
cvssv3.1 6.1 https://github.com/moodle/moodle
generic_textual MODERATE https://github.com/moodle/moodle
cvssv3.1 6.1 https://github.com/moodle/moodle/commit/46460a23035ad35caa50c2083ce6327f7723002e
generic_textual MODERATE https://github.com/moodle/moodle/commit/46460a23035ad35caa50c2083ce6327f7723002e
cvssv3.1 6.1 https://github.com/moodle/moodle/commit/476e97f280f5fa146f3ab676dd6f07de481ad9e8
generic_textual MODERATE https://github.com/moodle/moodle/commit/476e97f280f5fa146f3ab676dd6f07de481ad9e8
cvssv3.1 6.1 https://github.com/moodle/moodle/commit/d942f0311c0d4d8200b9d3244cc8847046abc32e
generic_textual MODERATE https://github.com/moodle/moodle/commit/d942f0311c0d4d8200b9d3244cc8847046abc32e
cvssv3.1 6.1 https://github.com/moodle/moodle/commit/f3e7afedb96e2637a30d9bebd5fa98d45eca5f55
generic_textual MODERATE https://github.com/moodle/moodle/commit/f3e7afedb96e2637a30d9bebd5fa98d45eca5f55
cvssv3.1 6.1 https://moodle.org/mod/forum/discuss.php?d=316665
generic_textual MODERATE https://moodle.org/mod/forum/discuss.php?d=316665
cvssv3.1 6.1 https://nvd.nist.gov/vuln/detail/CVE-2015-3275
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2015-3275
cvssv3.1 6.1 https://web.archive.org/web/20150924032214/http://www.securitytracker.com/id/1032877
generic_textual MODERATE https://web.archive.org/web/20150924032214/http://www.securitytracker.com/id/1032877
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50614
http://openwall.com/lists/oss-security/2015/07/13/2
https://api.first.org/data/v1/epss?cve=CVE-2015-3275
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/46460a23035ad35caa50c2083ce6327f7723002e
https://github.com/moodle/moodle/commit/476e97f280f5fa146f3ab676dd6f07de481ad9e8
https://github.com/moodle/moodle/commit/d942f0311c0d4d8200b9d3244cc8847046abc32e
https://github.com/moodle/moodle/commit/f3e7afedb96e2637a30d9bebd5fa98d45eca5f55
https://moodle.org/mod/forum/discuss.php?d=316665
https://nvd.nist.gov/vuln/detail/CVE-2015-3275
https://web.archive.org/web/20150924032214/http://www.securitytracker.com/id/1032877
GHSA-6922-5v25-p8jg https://github.com/advisories/GHSA-6922-5v25-p8jg
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50614
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at http://openwall.com/lists/oss-security/2015/07/13/2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/moodle/moodle
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/moodle/moodle/commit/46460a23035ad35caa50c2083ce6327f7723002e
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/moodle/moodle/commit/476e97f280f5fa146f3ab676dd6f07de481ad9e8
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/moodle/moodle/commit/d942f0311c0d4d8200b9d3244cc8847046abc32e
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/moodle/moodle/commit/f3e7afedb96e2637a30d9bebd5fa98d45eca5f55
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://moodle.org/mod/forum/discuss.php?d=316665
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2015-3275
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://web.archive.org/web/20150924032214/http://www.securitytracker.com/id/1032877
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.48806
EPSS Score 0.00255
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:29:42.545195+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-6922-5v25-p8jg/GHSA-6922-5v25-p8jg.json 36.1.3