Description In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses. Remediation References CVE-2021-36393 Related Vulnerabilities WordPress Plugin Video Conferencing with Zoom Cross-Site Scripting (4.0.9) Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2016-0736) WordPress Plugin StatPressCN 'wp-admin/admin.php' Multiple Cross-Site Scripting Vulnerabilities (1.9.0) WordPress Plugin WP125 Cross-Site Request Forgery (1.4.9) Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7818) Severity Critical Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2021-36393