CVE-2022-40313

State: PUBLISHED · Published: 2022-09-30 · Updated: 2025-05-20 · Assigner: fedora

Description

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load.

CWE

CWE-79 — CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected

n/a / moodle — v=4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions [affected]

CVSS

References

Source

cvelistV5-main/cves/2022/40xxx/CVE-2022-40313.json