GHSA-3qw5-v9cc-v262
GitHub Security Advisory
Cross site scripting in moodle
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
Affected Packages
Packagist
moodle/moodle
Affected versions:
0
(last affected: 3.10.9)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 15, 2025 6:32 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.