CVE-2020-1691
Description
In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.
CWE
- CWE-79 — CWE-79
Affected
- n/a / Moodle — v=3.8 [affected]
CVSS
- (none)
References
- https://moodle.org/mod/forum/discuss.php?d=395953 x_refsource_MISC
Source
cvelistV5-main/cves/2020/1xxx/CVE-2020-1691.json