Security Advisory
CVE-2020-25627
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.