Moodle Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Moodle's policy tool return URL. This issue allows remote attackers to inject malicious scripts by exploiting insufficient sanitization of URL parameters. Successful exploitation could result in information disclosure or the execution of arbitrary client-side scripts in the user's browser.

Impact

Exploitation of this vulnerability could lead to the execution of malicious scripts in the context of the user's browser, potentially allowing attackers to access sensitive information such as cookies or session data. In some cases, this could be combined with other vulnerabilities to execute arbitrary code on the victim's computer.