The version of Moodle installed on the remote host is 3.9.x prior to 3.9.18 or 3.11.x prior to 3.11.11. It is, therefore, affected by a Cross-Site Scripting (XSS) vulnerability though the VideoJS library included in Moodle. (CVE-2021-23414)
Note that the scanner has not attempted to exploit this issue but has instead relied only on application’s self-reported version number.
No source data