Headline
CVE-2021-36398
In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.
Related news
GHSA-786g-xv8v-9h93: Moodle Cross-site Scripting vulnerability
In Moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.