GHSA-pgcp-m69h-p2grMediumCVSS 6.1

Cross-site Scripting (XSS) in moodle

Published
March 29, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-25702 →

📋 Description

In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.

🎯 Affected products1

  • composer/moodle/moodle:>= 3.9.0, < 3.9.3

🔗 References (7)