Skip to content
fr Sign in
Not rated

CVE-2020-25631 A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include…

Description

A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8.

Affected products and versions

Product Affected versions Fixed in
Moodle Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Moodle

The 89 CVEs of Moodle →
CVE-2022-40208 In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential… 4.3 Medium CVE-2021-36402 In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration… 5.3 Medium CVE-2021-36395 In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion… 7.5 High CVE-2021-36392 In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses Not rated
Track this CVE