GHSA-28gc-4qq5-8q26MediumCVSS 6.1

Moodle Cross-site Scripting vulnerability

Published
November 9, 2023
Last Modified
November 15, 2023

🔗 CVE IDs covered (1)

CVE-2023-5541 →

📋 Description

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.

🎯 Affected products1

  • composer/moodle/moodle:< 4.3.0-rc2

🔗 References (6)