~ / search / GHSA-fwfj-8p36-rc64

GHSA-fwfj-8p36-rc64

Moodle vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-35131

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 4.2.0, < 4.2.1 4.2.1
Packagist moodle/moodle >= 4.1.0, < 4.1.4 4.1.4
Packagist moodle/moodle >= 4.0.0, < 4.0.9 4.0.9
Packagist moodle/moodle < 3.11.15 3.11.15

Details

As written in the advisory (Markdown source, shown as plain text).

Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.

References

External links from the advisory. They lead to third-party sites.