{"id":"CVE-2015-3275","aliases":["EUVD-2022-2754","GHSA-6922-5v25-p8jg","MGASA-2015-0302","UBUNTU-CVE-2015-3275"],"status":"published","title":"Moodle multiple cross-site scripting (XSS) vulnerabilities","description":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01465,"percentile":0.73826,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2015-08-03T20:55:18Z","modified":"2026-06-17T00:25:39Z","fixes":[{"ecosystem":"Packagist","package":"moodle/moodle","fixed_in":["2.7.9","2.8.7","2.9.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"moodle/moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.7.9"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"moodle/moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.0"},{"fixed":"2.8.7"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"moodle/moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.1"}]}]},{"source":"osv","ecosystem":"Packagist","package":"moodle/moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.7.9"}]}],"versions":["v2.7.0","v2.7.1","v2.7.2","v2.7.3","v2.7.4","v2.7.5","v2.7.6","v2.7.7","v2.7.8"]},{"source":"osv","ecosystem":"Packagist","package":"moodle/moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.0"},{"fixed":"2.8.7"}]}],"versions":["v2.8.0","v2.8.1","v2.8.2","v2.8.3","v2.8.4","v2.8.5","v2.8.6"]},{"source":"osv","ecosystem":"Packagist","package":"moodle/moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.1"}]}],"versions":["v2.9.0"]},{"source":"osv","ecosystem":"Mageia:5","package":"moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7-1.mga5"}]}],"bundled":3}],"products":[{"vendor":"moodle","product":"moodle"}],"references":[{"url":"http://openwall.com/lists/oss-security/2015/07/13/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=316665","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web"]},{"url":"http://www.securitytracker.com/id/1032877","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://git.moodle.org/gw?p=moodle.git\u0026a=search\u0026h=HEAD\u0026st=commit\u0026s=MDL-50614","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3275","tags":["advisory"]},{"url":"https://github.com/moodle/moodle/commit/46460a23035ad35caa50c2083ce6327f7723002e","tags":["web"]},{"url":"https://github.com/moodle/moodle/commit/476e97f280f5fa146f3ab676dd6f07de481ad9e8","tags":["web"]},{"url":"https://github.com/moodle/moodle/commit/d942f0311c0d4d8200b9d3244cc8847046abc32e","tags":["web"]},{"url":"https://github.com/moodle/moodle/commit/f3e7afedb96e2637a30d9bebd5fa98d45eca5f55","tags":["web"]},{"url":"https://web.archive.org/web/20150924032214/http://www.securitytracker.com/id/1032877","tags":["web"]},{"url":"https://github.com/advisories/GHSA-6922-5v25-p8jg"},{"url":"https://github.com/moodle/moodle","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2015-0302.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16374","tags":["report"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=316662","tags":["web"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=316664","tags":["web"]},{"url":"https://docs.moodle.org/dev/Moodle_2.8.7_release_notes","tags":["web"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=316289","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-3275","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/07/13/2","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3275","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-3275","description":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.","status":"published","published":"2016-02-22T02:00:00Z","modified":"2024-08-06T05:39:32.093Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2022-2754","description":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.","status":"published","published":"2016-02-22T02:00:00Z","modified":"2024-08-06T05:39:32Z","updated_at":"2026-11-03T02:22:08.642556Z"}],"ghsa":[{"id":"GHSA-6922-5v25-p8jg","title":"Moodle multiple cross-site scripting (XSS) vulnerabilities","description":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.","status":"published","published":"2022-05-13T01:12:47Z","modified":"2024-01-26T01:18:54Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:33.019154Z"}],"nvd":[{"id":"CVE-2015-3275","description":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.","status":"published","published":"2016-02-22T05:59:03.113Z","modified":"2026-06-17T00:25:39.26Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:03:15.746629Z"}],"osv":[{"id":"GHSA-6922-5v25-p8jg","title":"Moodle multiple cross-site scripting (XSS) vulnerabilities","description":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.","status":"published","published":"2022-05-13T01:12:47Z","modified":"2024-02-16T08:18:17.22618Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:39.618611Z"},{"id":"UBUNTU-CVE-2015-3275","description":"Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to (1) mod/scorm/player.php or (2) mod/scorm/prereqs.php.","status":"withdrawn","published":"2016-02-22T05:59:00Z","modified":"2025-07-16T08:11:30.095109Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"MGASA-2015-0302","title":"Updated moodle package fixes security vulnerabilities","description":"In Moodle before 2.8.7, phishing is possible when redirecting to external\nsite using referer headers in error messages (CVE-2015-3272).\n\nIn Moodle before 2.8.7, several web services returning user information\ndid not clean text in text custom profile fields, leading to possible XSS\n(CVE-2015-3274).\n\nIn Moodle before 2.8.7, possible Javascript injection was discovered in\nthe SCORM module (CVE-2015-3275).\n\nAs Moodle 2.6 is no longer supported, users of this package on Mageia 4\nare advised to migrate to Mageia 5.\n","status":"published","published":"2015-08-03T20:55:18Z","modified":"2026-04-16T06:24:43.877201253Z","updated_at":"2026-11-02T15:49:39.792687Z"}]}}