In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.
References
Link | Resource |
---|---|
https://moodle.org/mod/forum/discuss.php?d=395953 | Issue Tracking Patch Vendor Advisory |
Configurations
Information
Published : 2022-08-05 09:15
Updated : 2022-08-06 20:03
NVD link : CVE-2020-1691
Mitre link : CVE-2020-1691
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
moodle
- moodle