[HIGH] Moodle XML import of ddwtos could lead to intentional remote code execution

PKSA-w7mj-pb7y-rhgn CVE-2018-14630 GHSA-c3pr-h96w-2jjg

Affected package: moodle/moodle

Affected version: <3.1.14|>=3.2.0,<3.3.8|>=3.4.0,<3.4.5|>=3.5.0,<3.5.2

Reported by:
GitHub