Description
The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.
Remediation
References
Related Vulnerabilities
Apache Tomcat Other Vulnerability (CVE-2002-1895)
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (4.5)
WebLogic CVE-2024-21260 Vulnerability (CVE-2024-21260)
MediaWiki Improper Input Validation Vulnerability (CVE-2014-1610)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63516)