description: A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.
problem types: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
product: moodle
vendor: n/a
versions:
status: affected, version: Affects : 4.0, 3.11 to 3.11.6, 3.10 to 3.10.10, 3.9 to 3.9.13 and earlier unsupported versions
}