CVE-2014-3544

This repository contains a proof-of-concept exploit for CVE-2014-3544, targeting Moodle. The exploit involves session validation and manipulation, with functionality to add and manage user accounts via API endpoints.

This exploit demonstrates a persistent XSS vulnerability in Moodle 2.7 by injecting a malicious payload into the Skype ID field of a user profile. The payload triggers when the profile is viewed, executing arbitrary JavaScript.