Lucene search

K
osvGoogleOSV:CVE-2020-25627
HistoryDec 09, 2020 - 1:15 a.m.

CVE-2020-25627

2020-12-0901:15:12
Google
osv.dev
5

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.9%

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

CPENameOperatorVersion
moodleeq3.9.1
moodleeq3.9.0

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.9%