Description
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
Remediation
References
Related Vulnerabilities
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.29)
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2016-7052)
WordPress Plugin Campaign URL Builder Cross-Site Request Forgery (1.5.0)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2079)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2020-36326)