Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-35131


Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.


Published

2023-06-22T21:15:09.413

Last Modified

2024-11-21T08:07:59.883

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
  • Type: Primary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 3.11.15 Yes
Application moodle moodle < 4.0.9 Yes
Application moodle moodle < 4.1.4 Yes
Application moodle moodle 4.2.0 Yes

References