CVE-2021-36398: Moodle

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.

Affected products

• Moodle Moodle: version 3.11.0 only

Published 2023-03-06. Last modified 2026-06-17.