~ / search / GHSA-wvh5-78h5-gmgr

GHSA-wvh5-78h5-gmgr

Cross-site Scripting in moodle

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-30596

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 4.0, < 4.0.1 4.0.1
Packagist moodle/moodle >= 3.11, < 3.11.7 3.11.7
Packagist moodle/moodle >= 3.10, < 3.10.11 3.10.11
Packagist moodle/moodle >= 3.9, < 3.9.14 3.9.14

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk.

References

External links from the advisory. They lead to third-party sites.