medium5.4
CVE-2020-1691
Moodle XSS Vulnerability
Impact
In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | moodle/moodle | = 3.8 | 3.8.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | Version 3.8.0 |