| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.1, < 3.1.12≥ 3.2, < 3.2.9≥ 3.3, < 3.3.6≥ 3.4, < 3.4.3 | 3.1.123.2.93.3.63.4.3 |
| moodle | ≥ 3.1.0, ≤ 3.1.11≥ 3.2.0, ≤ 3.2.8≥ 3.3.0, ≤ 3.3.5≥ 3.4.0, ≤ 3.4.2 |
An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerability, users can move such a block to other pages where they can be viewed by other users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free