CVE-2021-20279

CVE-2021-20279

Vendor N/A

Product moodle

Weakness CWE-79 · XSS

Published March 15, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Key dates

02Disclosure timeline

March 15, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-20279

Related vulnerabilities

04Related CVE

CVE-2024-0367 Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link CVE-2023-45587 CVE-2018-3773 CVE-2025-23725 WordPress Accessibility Task Manager plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2021-43861 Incorrect sanitisation function leads to `XSS`