4.8
Moyenne
CVE-2021-36401 In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk
Description
In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Moodle | Versions non publiées |
Références
- moodle.org moodle.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Moodle
Les 89 CVE de Moodle →
CVE-2022-40208
In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential…
4.3
Moyenne
CVE-2021-36395
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion…
7.5
Élevée
CVE-2021-36403
In Moodle, in some circumstances, email notifications of messages could have the link back to the original message…
5.3
Moyenne
CVE-2021-36392
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses
Non notée