Lucene search

K
cvelistRedhatCVELIST:CVE-2020-25627
HistoryDec 09, 2020 - 12:04 a.m.

CVE-2020-25627

2020-12-0900:04:20
CWE-79
redhat
www.cve.org

0.001 Low

EPSS

Percentile

33.9%

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

CNA Affected

[
  {
    "product": "Moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "3.9 to 3.9.1"
      }
    ]
  }
]

0.001 Low

EPSS

Percentile

33.9%