Download
| Alert*
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access. CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback. |