Skip to main content

Moodle 3.11.10

Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 12 September 2022

Here is the full list of fixed issues in 3.11.10.

General fixes and improvements

  • MDL-71662 - Add group-filter to H5P-activity attempts report
  • MDL-70480 - get_user_submission susceptible to race condition resulting in invalid DB state
  • MDL-68717 - Upcoming events block doesn't remove completed activities

Security fixes

  • MSA-22-0023 - Stored XSS and page denial of service risks due to recursive rendering in Mustache template helpers
  • MSA-22-0024 - Remote code execution risk when restoring malformed backup file from Moodle 1.9
  • MSA-22-0025 - Minor SQL injection risk in admin user browsing
  • MSA-22-0026 - No groups filtering in H5P activity attempts report