CVE-2021-43558: Fedoraproject Extra Packages For Enterprise Linux

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A URL parameter in the filetype site administrator tool required extra sanitizing to prevent a reflected XSS risk.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: version 7.0 only
• Fedoraproject Fedora: version 35 only
• Moodle Moodle: up to and including 3.8.8; from 3.9.0, before 3.9.11 (fixed in 3.9.11); from 3.10.0, before 3.10.8 (fixed in 3.10.8); from 3.11.0, before 3.11.4 (fixed in 3.11.4)

Published 2021-11-22. Last modified 2026-06-17.