~ / search / GHSA-9724-h8p7-r3jv

GHSA-9724-h8p7-r3jv

Moodle Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-5546

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle < 4.3.0-rc2 4.3.0-rc2

Details

As written in the advisory (Markdown source, shown as plain text).

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

References

External links from the advisory. They lead to third-party sites.