Vulnerability Bulletins |
MSA-25-0029: XSS risk in MathJax (safe extension not loaded) |
|
| Affected software | PHP |
|
di Michael Hawkins. An extension was omitted from the MathJax configuration shipped with Moodle when the library was upgraded in LMS 5.0, resulting in an XSS risk.Severity/Risk:SeriousVersions affected:5.0Versions fixed:5.0.1Reported by:Martin GaukCVE identifier:CVE-2025-49512Changes (main):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-85488Tracker issue:MDL-85488 XSS risk in MathJax (safe extension not loaded) More info: https://moodle.org/mod/forum/discuss.php?d=468500&parent=1880830 |
|