Skip to content
OpenAdvisories

Archive

9 December 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2020-25627 Public exploit

    Moodle stored Cross-site Scripting (XSS)

    The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.