GHSA-mgfp-qcf2-pw3m

ghsaUSosv

Moodle stored Cross-site Scripting (XSS)

view advisory published 2022-05-24Licence: CC-BY-4.0

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25627US	medium6.1	3.72% (90th)	Exploit	2020-12-09
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.