~ / search / GHSA-cwhp-rqfr-8462

GHSA-cwhp-rqfr-8462

Moodle XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-1691

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.8, < 3.8.1 3.8.1

Details

As written in the advisory (Markdown source, shown as plain text).

In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.

References

External links from the advisory. They lead to third-party sites.