CVE-2023-30944 (published 2023-05-02T00:00:00)
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.
Affected products: Vendor: n/a
Product: moodle
Versions: Fixed in 4.1.3, 4.0.8, 3.11.14 and 3.9.21