GHSA-fcpw-vqh5-6qwjMediumCVSS 6.1

Moodle reflected XSS Vulnerability

Published
August 17, 2022
Last Modified
July 13, 2023

🔗 CVE IDs covered (1)

CVE-2020-14320 →

📋 Description

In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.

🎯 Affected products3

  • composer/moodle/moodle:= 3.9
  • composer/moodle/moodle:>= 3.8, <= 3.8.3
  • composer/moodle/moodle:>= 3.7, <= 3.7.6

🔗 References (4)