Moodle 3.11.x < 3.11.10 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.17, 3.11.x prior to 3.11.10 or 4.0.x prior to 4.0.4. It is, therefore, affected by multiple vulnerabilities: - A stored Cross-Site Scripting XSS and page Denial of Service DoS vulnerabilities due to recursive rendering in...

UBUNTU-CVE-2022-40315

A limited SQL injection risk was identified in the "browse list of users" site administration page...

CVE-2022-40315

CVE-2022-40315 corresponds to a limited SQL injection vulnerability in Moodle’s admin page that lists users (browse list of users). The issue is described with a high severity (CVSS 3.1 base score 9.8, critical) and is relevant to Moodle installations where the admin interface exposes this browse...