| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.10.0-beta, < 3.10.5≥ 3.11.0-beta, < 3.11.1< 3.9.8 | 3.10.53.11.13.9.8 |
| moodle | ≥ 3.10.0, < 3.10.5≥ 3.11.0, < 3.11.1< 3.9.8 | 3.10.53.11.13.9.8 |
In affected versions of Moodle, users' names require additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk. This issue has been patched in versions 3.9.8, 3.10.5 and 3.11.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free