Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-36568 — MEDIUM severity vulnerability | Release Alert

CVE-2021-36568

5.4

MEDIUMCVSS v3

Published

September 13, 2022

Affected

10 projects

Assigned by

MITRE

Severity scale

010

Description

In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" where its values "Field name" and "Field description" are vulnerable to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle 3.10.4 and Moodle 3.9.7.

GitHubMoodle - the world's open source learning platform

= 3.10.4, = 3.9.7, = 3.11.0NVD

NPMModel module for node for use with both mongodb and mysql.

= 3.10.4, = 3.9.7, = 3.11.0NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Moodle web services connection library

= 3.10.4, = 3.9.7, = 3.11.0NVD

RubyGemsInteract with Moodle from ruby

= 3.10.4, = 3.9.7, = 3.11.0NVD

GitHubModel module for node for use with both mongodb and mysql.

= 3.10.4, = 3.9.7, = 3.11.0NVD

Crates.ioBase library for interacting with Fedora web services

= 35, = 36NVD

Python Package IndexPlaceholder for the fedora name

= 35, = 36NVD

Docker HubOfficial Docker builds of Fedora

= 35, = 36NVD

NPMDigital Repository Ireland - fedora backend operations

= 35, = 36NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 35, = 36NVD