A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk.
2025-04-25T15:15:38.147
2025-06-24T15:59:06.960
Analyzed
CVSSv3.1: 5.4 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | moodle | moodle | < 4.1.18 | Yes |
| Application | moodle | moodle | < 4.3.12 | Yes |
| Application | moodle | moodle | < 4.4.8 | Yes |
| Application | moodle | moodle | < 4.5.4 | Yes |