CVE-2018-10891

https://notcve.org/view.php?id=CVE-2018-10891

10 Jul 2018 — A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank. Se ha encontrado un error en Moodle en versiones anteriores a la 3.5.1, 3.4.4, 3.3.7 y la 3.1.13. Cuando se importa un banco de preguntas de test, era posible que la previsualización de preguntas mostrada ejecute JavaScript que se escribe en el banco de preguntas. • http://www.securityfocus.com/bid/104739 • CWE-20: Improper Input Validation •