GHSA-j5xf-gv89-g422MediumCVSS 5.4

Moodle Cross-site Scripting vulnerability

Published
November 9, 2023
Last Modified
November 15, 2023

🔗 CVE IDs covered (1)

CVE-2023-5544 →

📋 Description

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.

🎯 Affected products1

  • composer/moodle/moodle:< 4.3.0-rc2

🔗 References (6)