Description
In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.
Remediation
References
Related Vulnerabilities
Drupal Core 4.5.x Mail Header Injection (4.5.0 - 4.5.7)
Joomla! Core 4.x.x Security Bypass (4.0.0 - 4.2.7)
WordPress Plugin Easy Forms for Mailchimp Cross-Site Scripting (5.0.6)
MySQL CVE-2017-3638 Vulnerability (CVE-2017-3638)
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343)