VYPR
← All advisories
Medium severity6.5OSV Advisory· Published Nov 9, 2023· Updated Jun 17, 2026

CVE-2023-5544

CVE-2023-5544

Description

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
moodle/moodlePackagist
< 4.3.0-rc24.3.0-rc2

Affected products

8
  • osv-coords2 versions
    pkg:bitnami/moodlepkg:composer/moodle/moodle
    >= 3.9.0, < 3.9.24+ 1 more
    • (no CPE)range: >= 3.9.0, < 3.9.24
    • (no CPE)range: < 4.3.0-rc2
  • Moodle/MoodleOSV2 versions
    v3.11.0, v3.11.1, v3.11.10, …+ 1 more
    • (no CPE)range: v3.11.0, v3.11.1, v3.11.10, …
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=3.9.0,<3.9.24
  • Red Hat/Enterprise Linux Server
    cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.