CVE-2020-1756

7.2 highEPSS 1.0%

High (7.2) in moodle moodle. EPSS 1.0% chance of exploitation in the next 30 days.

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.

Severity

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2022-08-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19