Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-28332

Moodle: algebra filter xss when filter is misconfigured

Description

If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 4.1.0 to < 4.1.2affected
  • 4.0.0 to < 4.0.7affected
  • 3.11.0 to < 3.11.13affected
  • 0 to < 3.9.20affected

References