CVE-2022-45150

A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitization of user-supplied data in policy tool. An attacker can trick the victim to open a specially crafted link that executes an arbitrary HTML and script code in user's browser in context of vulnerable website. This vulnerability may allow an attacker to perform cross-site scripting (XSS) attacks to gain access potentially sensitive information and modification of web pages.

• CWE-79
• CWE-79
• CWE-79

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76091
• https://bugzilla.redhat.com/show_bug.cgi?id=2142773
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74SXNGA5RIWM7QNX7H3G7SYIQLP4UUGV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRJB5JNKK3VVBLV3NH3RI7COEDAXSAB/
• https://moodle.org/mod/forum/discuss.php?d=440770
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76091
• https://bugzilla.redhat.com/show_bug.cgi?id=2142773
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74SXNGA5RIWM7QNX7H3G7SYIQLP4UUGV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRJB5JNKK3VVBLV3NH3RI7COEDAXSAB/
• https://moodle.org/mod/forum/discuss.php?d=440770

Published

Nov 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45145egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary…9.8
• CVE-2022-45146An issue was discovered in the FIPS Java API of Bouncy Castl…5.5
• CVE-2022-45147A vulnerability has been identified in SIMATIC PCS neo V4.0 …8.5
• CVE-2022-45148Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-45149A vulnerability was found in Moodle which exists due to insu…5.4
• CVE-2022-4515A flaw was found in Exuberant Ctags in the way it handles th…7.8
• CVE-2022-45151The stored-XSS vulnerability was discovered in Moodle which …5.4
• CVE-2022-45152A blind Server-Side Request Forgery (SSRF) vulnerability was…9.1
• CVE-2022-45153An Incorrect Default Permissions vulnerability in saphanaboo…7.8
• CVE-2022-45154A Cleartext Storage of Sensitive Information vulnerability i…5.5
• CVE-2022-45155An Improper Handling of Exceptional Conditions vulnerability…5.5
• CVE-2022-45157A vulnerability has been identified in the way that Rancher …9.1