description: A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
problem types: CWE-89
affected:
{
product: moodle
vendor: n/a
versions:
status: affected, version: moodle 3.11.5
}