{"action":"Upgrade moodle/moodle to 3.1.13 or later.","affected":[{"fixed":"3.5.1","introduced":"3.5.0"},{"fixed":"3.4.4","introduced":"3.4.0"},{"fixed":"3.3.7","introduced":"3.3.0"},{"fixed":"3.2.10","introduced":"3.2.0"},{"fixed":"3.1.13","introduced":"3.1.0"}],"component":"moodle/moodle","cve_ids":["CVE-2018-10891"],"ecosystem":"Packagist","epss":0.02064,"exploited":false,"fixed_versions":["3.5.1","3.4.4","3.3.7","3.2.10","3.1.13"],"ghsa_id":"GHSA-p7v9-gjrh-563x","id":"tcs_01M5KF6687PP6NXD8HAGQD3V49","modified_at":"2024-02-16T08:08:45.769892Z","published_at":"2022-05-13T01:14:06Z","references":["https://osv.dev/vulnerability/GHSA-p7v9-gjrh-563x","https://nvd.nist.gov/vuln/detail/CVE-2018-10891","https://github.com/moodle/moodle/commit/0b18d0c960c27994dd9870d286f2da3fa5868c06","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10891","https://github.com/moodle/moodle","https://moodle.org/mod/forum/discuss.php?d=373371","https://web.archive.org/web/20210124185945/https://www.securityfocus.com/bid/104739"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-p7v9-gjrh-563x","url":"https://osv.dev/vulnerability/GHSA-p7v9-gjrh-563x"}],"summary":"Moodle XSS Vulnerability"}