description: The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.
problem types: CWE-79
affected:
{
product: Moodle
vendor: n/a
versions:
status: affected, version: 3.9 to 3.9.1
}