CVE-2020-14320

In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.

Score

CVSS 3.1 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2022-08-16

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Moodle (Moodle)

References

• https://moodle.org/mod/forum/discuss.php?d=407392