CVE-2021-20280: Fedoraproject Fedora

Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days.

Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Moodle Moodle: from 3.5.0, before 3.5.17 (fixed in 3.5.17); from 3.8.0, before 3.8.8 (fixed in 3.8.8); from 3.9.0, before 3.9.5 (fixed in 3.9.5); from 3.10.0, before 3.10.2 (fixed in 3.10.2)

Published 2021-03-15. Last modified 2026-06-17.