Moodle · Moodle · CVE-2020-25631
**Name of the Vulnerable Software and Affected Versions**
Moodle versions 3.7 through 3.7.7
Moodle versions 3.8 through 3.8.4
Moodle versions 3.9 through 3.9.1
**Description**
A vulnerability was found in Moodle where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" page.
**Recommendations**
For versions 3.7 through 3.7.7, update to version 3.7.8.
For versions 3.8 through 3.8.4, update to version 3.8.5.
For versions 3.9 through 3.9.1, update to version 3.9.2.