Moodle CVE-2021-36403 Vulnerability (CVE-2021-36403)

Description

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

Remediation

References

CVE-2021-36403

Related Vulnerabilities

PHP Other Vulnerability (CVE-2007-4528)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.10)

IBM WebSEAL CVE-2018-1813 Vulnerability (CVE-2018-1813)

WordPress Plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance Cross-Site Scripting (1.7.1)

WordPress Plugin iThemes Security (formerly Better WP Security) Security Bypass (7.9.0)

Severity

Medium

Classification

CVE-2021-36403 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N