Threats tagged 'bit-moodle-2024-28593'

CVE-2024-28593 is a medium severity vulnerability in the Chat activity of Moodle 4.3.3 that allows students to insert potentially unwanted HTML elements such as <a> or <img>, or other HTML content that can degrade performance. The Moodle vendor documentation acknowledges that users can insert HTML in chat messages and notes that the Chat feature is planned to be removed from standard Moodle.