| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.10, < 3.10.2≥ 3.5, < 3.5.17≥ 3.8, < 3.8.8≥ 3.9, < 3.9.5 | 3.10.23.5.173.8.83.9.5 |
| moodle | ≥ 3.10.0, < 3.10.2≥ 3.5.0, < 3.5.17≥ 3.8.0, < 3.8.8≥ 3.9.0, < 3.9.5 | 3.10.23.5.173.8.83.9.5 |
Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free