description: A limited SQL injection risk was identified in the "browse list of users" site administration page.
problem types: SQL injection
affected:
{
product: moodle
vendor: n/a
versions:
status: affected, version: 4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions
}