A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost themes secure layout, meaning students could navigate out of the page.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Moodle | Moodle | 3.5.0 (including) | 3.5.5 (excluding) |
| Moodle | Moodle | 3.6.0 (including) | 3.6.3 (excluding) |