Advisories · Technology
jleyva moodle-block_configurablereports.
Every CVE that names jleyva moodle-block_configurablereports among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var
- jleyva moodle-block_configurablereports
- SQL injection
- CVSS 7.1 High
Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data
- jleyva moodle-block_configurablereports
- Broken access control