Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/moodle/moodle@2.0.1
purl pkg:composer/moodle/moodle@2.0.1
Tags Ghost
Next non-vulnerable version 4.5.9
Latest non-vulnerable version 5.1.2
Risk score 4.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-58fm-v4pr-jh8p
Aliases:
CVE-2016-9187
Moodle Unrestricted file upload vulnerability Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle … There are no reported fixed by versions.
GHSA-7ghm-fp7p-qvjq
Aliases:
CVE-2016-9188
Moodle XSS Vulnerability Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary … There are no reported fixed by versions.
This package is not known to fix any advisories.