-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| moodle/moodle | composer | < 1.8.13 | 1.8.13 |
| moodle/moodle | composer | >= 1.9.0, < 1.9.9 | 1.9.9 |
Miggo AIRoot Cause AnalysisThe GitHub commit diff shows a critical line added to cleanAttributes2 in lib/weblib.php: a regex replacement for 'vbscript' with whitespace. The CVE description explicitly states the KSES filter in this file failed to handle vbscript URIs. The patch targets this function, confirming it was the root cause. No other functions are mentioned in the vulnerability context or patch details.