CVE-2020-25628
EUVD-2021-061608.12.2020, 01:15
The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 3.5.0 ≤ 𝑥 < 3.5.14 |
| moodle | moodle | 3.7.0 ≤ 𝑥 < 3.7.8 |
| moodle | moodle | 3.8.0 ≤ 𝑥 < 3.8.5 |
| moodle | moodle | 3.9.0 ≤ 𝑥 < 3.9.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases