Moodle 1.9.9 release notes
From MoodleDocs
Release date: 8th June, 2010
Here is the full list of issues fixed in 1.9.9
Highlights
- Some general minor bugs fixed in different areas.
- Four security fixes (see below).
Security issues
Some of these vulnerabilities are potentially serious so we strongly recommend you upgrade.
- MSA-10-0010 Persistent Cross Site Scripting vulnerability in the MNET access control interface
- MSA-10-0011 Cross Site Scripting vulnerability in blog/index.php
- MSA-10-0012 KSES Security Filter Bypassing vulnerability
- MSA-10-0013 Potential Cross Site Scripting vulnerability in Quiz reports