CVE-2023-35131

MediumCVSS 6.1

Published: 22/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

43th percentile - higher than 43% of all known CVEs

Summary

The groups page in Moodle has a vulnerability that requires additional content sanitization to prevent XSS risk. This issue affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, and 3.11 to 3.11.14.

Risk Assessment

This vulnerability could lead to XSS attacks, posing a risk of session hijacking or data theft. Organizations using affected versions of Moodle are exposed to potential security threats.

Recommendation

It is recommended to update Moodle to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify other potential threats.

Original NVD description (English source)

Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.