Servers and applications
CVE-2020-25702
In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.
- Severity
- Medium 6.1
- Published
- 19 Nov 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 3.9.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MoodleServers and applications · cpe:a:moodle:moodle |
|