Description
In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk.
Remediation
References
Related Vulnerabilities
ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11446)
Oracle JRE CVE-2013-2464 Vulnerability (CVE-2013-2464)
Apache Tomcat Other Vulnerability (CVE-2003-0866)
WordPress Plugin WP Humans.txt Cross-Site Scripting (1.0.6)
Apache HTTP Server Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-58098)