GHSA-jqgr-gh62-jf53
GitHub Security Advisory
Moodle Stored Cross-site Scripting and page denial of service
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an Cross-site Scripting risk or a page failing to load.
Affected Packages
Packagist
moodle/moodle
Affected versions:
3.9
(fixed in 3.9.17)
Packagist
moodle/moodle
Affected versions:
3.11
(fixed in 3.11.10)
Packagist
moodle/moodle
Affected versions:
4.0
(fixed in 4.0.4)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 31, 2025 6:36 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.