A vulnerability was found in moodle 3.7 to 3.7.2 and before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed.

Affected Packages

Packagist moodle/moodle

Affected versions: 3.7.0 (fixed in 3.7.3)

Related CVEs

CVE-2019-14881

Key Information

GHSA ID

GHSA-9jf6-wq34-fg9w

Published

May 24, 2022 5:11 PM

Last Modified

September 26, 2023 8:42 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

moodle/moodle

GitHub Reviewed

✓ Yes

Dataset

Last updated: September 14, 2025 6:31 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.