CVE-2021-20186 | BDVDB-2026-148263 Detail

moodle

Description#

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://moodle.org/mod/forum/discuss.php?d=417170

Exploit#

No public exploit known

History#

Version 12021-01-28Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.