CVE-2021-36399: Moodle

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk.

Affected products

• Moodle Moodle: version 3.11.0 only

Published 2023-03-06. Last modified 2026-06-17.