Launchpad.net

CVE 2020-1756

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.

See the CVE page on Mitre.org for more details.

References