Description
Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Remediation
References
Related Vulnerabilities
WordPress Plugin Mikiurl WordPress Eklentisi Cross-Site Request Forgery (2.0)
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62253)
WordPress Plugin Print Invoice & Delivery Notes for WooCommerce Cross-Site Scripting (4.7.1)
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-22021)
WordPress Plugin PayPal Shopping Cart Multiple Vulnerabilities (1.1.9)