Description A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria. Remediation References CVE-2022-30599 Related Vulnerabilities WordPress Plugin Teaser Maker Cross-Site Scripting (0.1.114) Drupal Other Vulnerability (CVE-2007-0658) PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-2829) WordPress Plugin Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages Multiple Cross-Site Scripting Vulnerabilities (45.0) Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2017-2670) Severity Critical Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2022-30599