CVE-2020-1691

In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.
References
Link Resource
https://moodle.org/mod/forum/discuss.php?d=395953 Issue Tracking Patch Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:moodle:moodle:3.8.0:*:*:*:*:*:*:*

Information

Published : 2022-08-05 09:15

Updated : 2022-08-06 20:03


NVD link : CVE-2020-1691

Mitre link : CVE-2020-1691


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

moodle

  • moodle