nginx 1.23.4
tcp/443 tcp/80
The following Moodle application is publicly accessible and looks out-dated :
It is highly recommended to update to a safe version as soon as possible since multiple CVEs allow remote attackers to craft XSS attacks leading to code execution on the server.
If the application was already patched, reloading the web server to clear the PHP opcache will fix issue.
Reference:
Severity: high
Fingerprint: 0b591a20d83e9bbda3370ce58008084480080844800808448008084480080844
Found vulnerable Moodle application: Affected by CVE-2023-30943
Open service 162.241.60.224:80 · escolapt.org.br
2026-01-12 21:54
HTTP/1.1 301 Moved Permanently Date: Mon, 12 Jan 2026 21:55:05 GMT Server: nginx/1.23.4 Content-Type: text/html; charset=UTF-8 Content-Length: 0 X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=2592000 Referrer-Policy: origin-when-cross-origin Permissions-Policy: accelerometer=(self), autoplay=(self), camera=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self) X-Redirect-By: WordPress Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Location: https://escolapt.org.br/ X-Server-Cache: true X-Proxy-Cache: MISS
Open service 162.241.60.224:443 · escolapt.org.br
2026-01-12 21:54
HTTP/1.1 200 OK Date: Mon, 12 Jan 2026 21:54:47 GMT Server: nginx/1.23.4 Content-Type: text/html; charset=UTF-8 X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=2592000 Referrer-Policy: origin-when-cross-origin Permissions-Policy: accelerometer=(self), autoplay=(self), camera=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self) Link: <https://escolapt.org.br/wp-json/>; rel="https://api.w.org/", <https://escolapt.org.br/wp-json/wp/v2/pages/8>; rel="alternate"; title="JSON"; type="application/json", <https://escolapt.org.br/>; rel=shortlink Vary: Accept-Encoding X-Server-Cache: true X-Proxy-Cache: HIT Transfer-Encoding: chunked