~ / search / GHSA-28gc-4qq5-8q26

GHSA-28gc-4qq5-8q26

Moodle Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-5541

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle < 4.3.0-rc2 4.3.0-rc2

Details

As written in the advisory (Markdown source, shown as plain text).

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.

References

External links from the advisory. They lead to third-party sites.