CVE-2020-25702CWE-79

CVE-2020-25702: vulnerability in moodle

Published · Updated

Follow this CVE+ Monitor moodle+ Monitor moodle/moodle

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.
Affected products
n/a · moodle