Cross-Site Scripting Vulnerability in Moodle
CVE-2023-35131
6.1MEDIUM
What is CVE-2023-35131?
A cross-site scripting (XSS) vulnerability has been identified in Moodle that stems from insufficient sanitization of content on the groups page. This flaw allows an attacker to inject malicious scripts, potentially compromising the security of the platform and the data of its users. Affected versions include Moodle 4.2, as well as earlier versions 4.1 up to 4.1.3, 4.0 up to 4.0.8, and 3.11 up to 3.11.14. Operators of the affected versions are advised to implement updates and sanitization practices to mitigate risks.
Affected Version(s)
moodle 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14