Moodle 4.0.x < 4.0.4 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.17, 3.11.x prior to 3.11.10 or 4.0.x prior to 4.0.4. It is, therefore, affected by multiple vulnerabilities: - A stored Cross-Site Scripting XSS and page Denial of Service DoS vulnerabilities due to recursive rendering in...

CVE-2022-40313: Improper Neutralization of Input During Web Page Generation

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load...