Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-36401 - Vulnerability Database

Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-36401

Medium

Reference: CVE-2021-36401

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-36401

Title: Moodle Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

In Moodle ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.