CVE-2020-25627
Description
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.
CWE
- CWE-79 — CWE-79
Affected
- n/a / Moodle — v=3.9 to 3.9.1 [affected]
CVSS
- (none)
References
- https://moodle.org/mod/forum/discuss.php?d=410839 x_refsource_CONFIRM
Source
cvelistV5-main/cves/2020/25xxx/CVE-2020-25627.json