CVE-2021-36568: Fedoraproject Fedora

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" where its values "Field name" and "Field description" are vulnerable to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle 3.10.4 and Moodle 3.9.7.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only
• Moodle Moodle: version 3.9.7 only; version 3.10.4 only; version 3.11.0 only

Published 2022-09-13. Last modified 2026-06-17.