A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
| Software | From | Fixed in |
|---|---|---|
moodle / moodle
|
- | 3.10.9.x |
moodle / moodle
|
3.10.9 | 3.10.9.x |