[MEDIUM] Moodle XSS from profile fields from external db

PKSA-75hy-ngqk-dth8 CVE-2016-2152 GHSA-6mxm-wpqv-675h

Affected package: moodle/moodle

Affected version: >=3.0,<3.0.3|>=2.9,<2.9.5|>=2.8,<2.8.11|>=2.7,<2.7.13

Reported by:
GitHub