Description

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.

Remediation

References

CVE-2021-20186

Related Vulnerabilities

PHP CVE-2007-0910 Vulnerability (CVE-2007-0910)

WordPress Plugin RocketTheme RokBox 'jwplayer.swf' Cross-Site Scripting (2.11)

WordPress Plugin Frontend File Manager Cross-Site Request Forgery (21.3)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4421)

Oracle JRE CVE-2014-2409 Vulnerability (CVE-2014-2409)

Severity

Medium

Classification

CVE-2021-20186 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities