3.3.7

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-17	CVE-2018-14631	Cross-site Scripting vulnerability in Moodle moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. network moodle CWE-79	4.3
2018-09-17	CVE-2018-14630	Code Injection vulnerability in Moodle moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. network low complexity moodle CWE-94	6.5