writeups.xyz / Moodle - Stored XSS and blind SSRF possible via feedback answer text

Submitter : c2a

Date: 22 October 2021

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• SSRF

Programs :

• Moodle

Authors :

• Rekter0 (@Rekter0)
• Holme (@Holme_sec)

Link :
https://r0.haxors.org/posts?id=20