| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 4.2.0, < 4.2.7≥ 4.3.0, < 4.3.4< 4.1.10 | 4.2.74.3.44.1.10 |
| moodle | ≥ 4.2.0, < 4.2.7≥ 4.3.0, < 4.3.4< 4.1.10 | 4.2.74.3.44.1.10 |
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free