| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.10, < 3.10.2≥ 3.5, < 3.5.17≥ 3.8, < 3.8.8≥ 3.9, < 3.9.5 | 3.10.23.5.173.8.83.9.5 |
| moodle | ≥ 3.10.0, < 3.10.2≥ 3.5.0, < 3.5.17≥ 3.8.0, < 3.8.8≥ 3.9.0, < 3.9.5 | 3.10.23.5.173.8.83.9.5 |
The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free