A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages.
{
"versions": [
{
"introduced": "3.5.0"
},
{
"fixed": "3.5.9"
},
{
"introduced": "3.6.0"
},
{
"fixed": "3.6.7"
},
{
"introduced": "3.7.0"
},
{
"last_affected": "3.7.3"
}
]
}