| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.11, < 3.11.11≥ 3.9, < 3.9.18≥ 4.0, < 4.0.5 | 3.11.113.9.184.0.5 |
| moodle | ≥ 3.11.0, < 3.11.11≥ 3.9.0, < 3.9.18≥ 4.0.0, < 4.0.5 | 3.11.113.9.184.0.5 |
A reflected cross-site scripting vulnerability was discovered in Moodle. This flaw exists due to insufficient sanitization of user-supplied data in policy tool. An attacker can trick the victim to open a specially crafted link that executes an arbitrary HTML and script code in user's browser in context of vulnerable website. This vulnerability may allow an attacker to perform cross-site scripting (XSS) attacks to gain access potentially sensitive information and modification of web pages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free