medium6.1
CVE-2020-25627
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk.
Impact
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | from 3.9.0 before 3.9.2 |