Moodle 3.11.x < 3.11.10 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.17, 3.11.x prior to 3.11.10 or 4.0.x prior to 4.0.4. It is, therefore, affected by multiple vulnerabilities: - A stored Cross-Site Scripting XSS and page Denial of Service DoS vulnerabilities due to recursive rendering in...

CVE-2022-40313

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load...

CVE-2022-40313

CVE-2022-40313 affects Moodle due to recursive rendering of Mustache template helpers containing user input, which can cause an XSS risk and page load failures. Connected sources indicate vulnerable Moodle versions include 3.11–3.11.14, 4.0–4.0.8, 4.1–4.1.3, and 4.2; remediation is to upgrade to ...