MO
Product
moodle
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 8Low 0
Watch
Add moodle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2986 | 8.8 | Oct 6 | Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk Affected: moodle 4.0.3 and moodle 3.11.9 |
| CVE-2022-40313 | 7.1 | Sep 30 | Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load Affected: 4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions |
Showing 2