GHSA-mgfp-qcf2-pw3m
Moodle stored Cross-site Scripting (XSS)
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | moodle/moodle | >= 3.9, < 3.9.2 | 3.9.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.
References
External links from the advisory. They lead to third-party sites.