| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.10, < 3.10.1≥ 3.5, < 3.5.16≥ 3.8, < 3.8.7≥ 3.9, < 3.9.4 | 3.10.13.5.163.8.73.9.4 |
| moodle | ≥ 3.10.0, < 3.10.1≥ 3.8.0, < 3.8.7≥ 3.9.0, < 3.9.4< 3.5.16 | 3.10.13.8.73.9.43.5.16 |
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free