CVE-2020-1691 - In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting

MEDIUM

In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting

Published Aug 5, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.63%

In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Moodle

n/a

Version	Status	Constraints
3.8	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6545		Advisory
https://github.com/advisories/GHSA-cwhp-rqfr-8462		Advisory
https://github.com/moodle/moodle/commit/4e809346537e230cbff8235bfee0e7e151e4e9f9
https://moodle.org/mod/forum/discuss.php?d=395953		x_refsource_MISCIssue TrackingPatchVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-1691