~ / search / GHSA-pgcp-m69h-p2gr

GHSA-pgcp-m69h-p2gr

Cross-site Scripting (XSS) in moodle

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-25702

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.9.0, < 3.9.3 3.9.3

Details

As written in the advisory (Markdown source, shown as plain text).

In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.

References

External links from the advisory. They lead to third-party sites.