Security and privacy

Bugs: Code Injection in Moodle?

Tim at Lone Pine Koala Sanctuary
Re: Bugs: Code Injection in Moodle?
Core developersDocumentation writersParticularly helpful MoodlersPlugin developers
As you can see here: (scroll down to MSA-18-0007) this was fixed in 3.1.12, so you just need to upgrade to that version.

You should register your site ( That way, you will get an email as soon as security fixes are released so you can upgrade your site before the details are made public.
Average of ratings: Useful (4)