Moodle 3.11.10

Unsupported Moodle Version

This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 12 September 2022

Here is the full list of fixed issues in 3.11.10.

General fixes and improvements

• MDL-71662 - Add group-filter to H5P-activity attempts report
• MDL-70480 - get_user_submission susceptible to race condition resulting in invalid DB state
• MDL-68717 - Upcoming events block doesn't remove completed activities

Security fixes

• MSA-22-0023 - Stored XSS and page denial of service risks due to recursive rendering in Mustache template helpers
• MSA-22-0024 - Remote code execution risk when restoring malformed backup file from Moodle 1.9
• MSA-22-0025 - Minor SQL injection risk in admin user browsing
• MSA-22-0026 - No groups filtering in H5P activity attempts report