CVE-2020-25702

MEDIUM · CVSS 6.1 EPSS 1.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-25702

Severity

MEDIUM

CVSS

6.1

EPSS

1.28%

Java

Original NVD Description

In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.