Back to search
CVE-2020-25702
Published: Nov 19, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.
| Vendor | Product | Versions |
|---|---|---|
n/a | moodle | affected Fixed in 3.9.3, Fixed in 3.10 |
Weaknesses (CWE)
References
https://bugzilla.redhat.com/show_bug.cgi?id=1895437
x_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=413940
x_refsource_MISC
FEDORA-2020-304aa2c365
vendor-advisory
x_refsource_FEDORA
FEDORA-2020-db73e37548
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now