| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.1.0, < 3.1.13≥ 3.2.0, < 3.2.10≥ 3.3.0, < 3.3.7≥ 3.4.0, < 3.4.4≥ 3.5.0, < 3.5.1 | 3.1.133.2.103.3.73.4.43.5.1 |
| moodle | ≥ 3.1, < 3.1.13≥ 3.3, < 3.3.7≥ 3.4, < 3.4.4≥ 3.5, < 3.5.1 | 3.1.133.3.73.4.43.5.1 |
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free