| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | < 4.3.0-rc2 | 4.3.0-rc2 |
| moodle | ≥ 3.11.0, < 3.11.17≥ 3.9.0, < 3.9.24≥ 4.0.0, < 4.0.11≥ 4.1.0, < 4.1.6≥ 4.2.0, < 4.2.3 | 3.11.173.9.244.0.114.1.64.2.3 |
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free