PT-2022-4074 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A reflected XSS issue was identified in the LTI module of Moodle due to insufficient sanitization of user-supplied data. A remote attacker can trick the victim into following a specially...

PT-2022-5980 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A blind Server-Side Request Forgery SSRF vulnerability was found due to insufficient validation of user-supplied input in the LTI provider library. The library does not utilize Moodle's...