What the vulnerability does

01Description

It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.

Key dates

02Disclosure timeline

January 28, 2021 CVE published
August 3, 2024 Record updated