CVE-2023-5546
Fixed upstream EPSS 1%CVSS 4.3
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
Products: Moodle
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | moodle/moodle | 4.3.0-rc2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu:Pro:16.04:LTS | moodle | no fix |
| Ubuntu:Pro:18.04:LTS | moodle | no fix |