CVE-2021-20183: Moodle

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.

Affected products

• Moodle Moodle: before 3.10.1 (fixed in 3.10.1)

Published 2021-01-28. Last modified 2026-06-17.