| Topic: | XSS in install.php before config.php created - no action required on working installations |
| Severity: | Very low |
| Versions affected: |
1.5.x <1.6.6 <1.7.4 <1.8.4 |
| Reported by: | Hanno Boeck (schokokeks) |
| Issue no.: | MDL-12869 |
| Solution: | It is recommended to finish installation after uploading of Moodle files. Always use latest stable version for initial installation. |