Moodle Cross-Site Scripting Vulnerability (CNVD-2021-93379)

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. cross-site scripting vulnerability exists in Moodle, which stems from the lack of effective filtering and escaping of URL parameters in the site administrator tool, allowing an attacker to execute reflective cross-site scripting.