Further information:



(and many more)

I have reported an issue through the form https://moodle.org/mod/page/view.php?id=8722. That was Wednesday 6 July late a'noon GMT. Haven't received an acknowledgement up to now. Do security issue submissions acknowledged?