{"action":"Upgrade moodle/moodle to 3.11.10 or later.","affected":[{"introduced":"0","last_affected":"3.9.7"},{"introduced":"3.10.0","last_affected":"3.10.4"},{"fixed":"3.11.10","introduced":"3.11.0"}],"component":"moodle/moodle","cve_ids":["CVE-2021-36568"],"ecosystem":"Packagist","epss":0.01045,"exploited":false,"fixed_versions":["3.11.10"],"ghsa_id":"GHSA-fm6m-fg23-67jq","id":"tcs_01M5KF1X1ZPVC0VX067JVMT07G","modified_at":"2024-02-16T08:13:22.227241Z","published_at":"2022-09-14T00:00:41Z","references":["https://osv.dev/vulnerability/GHSA-fm6m-fg23-67jq","https://nvd.nist.gov/vuln/detail/CVE-2021-36568","https://blog.hackingforce.com.br/en/cve-2021-36568","https://bugzilla.redhat.com/show_bug.cgi?id=2126857","https://github.com/moodle/moodle","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERQ3NHVOK4ZXT4MS4LBQ2ZJHTON3LIMW","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PRI4ETMQ4DJR3TZUOOGPBQ32RBD5LNGC"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-fm6m-fg23-67jq","url":"https://osv.dev/vulnerability/GHSA-fm6m-fg23-67jq"}],"summary":"Moodle Cross-site Scripting vulnerability"}