description: In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.
problem types: CWE-79
affected:
{
product: Moodle
vendor: n/a
versions:
status: affected, version: 3.8
}