Description
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
Remediation
References
Related Vulnerabilities
Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999047)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1432)
Craft CMS Improper Authentication Vulnerability (CVE-2024-41800)
WordPress Plugin WordPress Bitcoin Payments-Blockonomics Cross-Site Scripting (3.2)
WordPress Plugin Import and export users and customers Security Bypass (1.15)