Description (CNA)
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Moodle | affected 3.8 to 3.8.1, 3.7 to 3.7.4, 3.6 to 3.6.8, 3.5 to 3.5.10 and earlier unsupported versions |
CWE
CWE-20
References
ADP enrichment
No English description supplied.