Description
Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ajax Plugin Helper Cross-Site Scripting (1.0.5)
WordPress 4.4.x Denial of Service Vulnerability (4.4 - 4.4.14)
WordPress Plugin Mail Queue Cross-Site Scripting (1.1)
WordPress Plugin Easy FancyBox Unspecified Vulnerability (1.3.4.9)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760)