← All advisories

Medium severity6.1NVD Advisory· Published Mar 26, 2017· Updated Jun 17, 2026

CVE-2017-2644

CVE-2017-2644

Description

In Moodle 3.x, XSS can occur via evidence of prior learning.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
moodle/moodlePackagist	>= 3.2.0, < 3.2.2	3.2.2
moodle/moodlePackagist	>= 3.1.0, < 3.1.5	3.1.5

Affected products

17

Moodle/Moodle16 versions
cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.1.0:beta:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.0:beta:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.0:rc5:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:3.2.1:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/moodle/moodle
Range: >= 3.2.0, < 3.2.2

Patches

Vulnerability mechanics

References

8

moodle.org/mod/forum/discuss.phpnvdPatchThird Party AdvisoryWEB
www.securityfocus.com/bid/96979nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-93gj-rg98-h7mmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-2644ghsaADVISORY
github.com/moodle/moodle/commit/ac40d8b589820929fe4201a3f0640414e2b9dabdghsaWEB
web.archive.org/web/20210124004851/http://www.securityfocus.com/bid/96979ghsaWEB
web.archive.org/web/20210227004858/http://www.securitytracker.com/id/1038174ghsaWEB
www.securitytracker.com/id/1038174nvd

News mentions

0

No linked articles in our index yet.