VYPR
← All advisories
Medium severity4.3OSV Advisory· Published Nov 9, 2023· Updated Jun 17, 2026

CVE-2023-5546

CVE-2023-5546

Description

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
moodle/moodlePackagist
< 4.3.0-rc24.3.0-rc2

Affected products

8
  • Moodle/MoodleOSV2 versions
    v4.0.0, v4.0.1, v4.0.10, …+ 1 more
    • (no CPE)range: v4.0.0, v4.0.1, v4.0.10, …
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=4.0.0,<4.0.11
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server
    cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • osv-coords2 versions
    pkg:bitnami/moodlepkg:composer/moodle/moodle
    >= 4.0.0, < 4.0.11+ 1 more
    • (no CPE)range: >= 4.0.0, < 4.0.11
    • (no CPE)range: < 4.3.0-rc2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.