~ / search / GHSA-786g-xv8v-9h93

GHSA-786g-xv8v-9h93

Moodle Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-36398

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.11, < 3.11.1 3.11.1

Details

As written in the advisory (Markdown source, shown as plain text).

In Moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.

References

External links from the advisory. They lead to third-party sites.