CVE-2020-25627CWE-79

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk

published December 9, 2020

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03725 · 89.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-12-09T00:04Z
EPSS history
Timeline
  • 09 DEC 00:04Z
    The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk
    cvelistv5