medium5.4
CVE-2021-32244
Moodle Cross Site Scripting (XSS)
Impact
Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | moodle/moodle | = 3.10.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | Version 3.10.3 |