MO
Product
moodle
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 7Low 0
Watch
Add moodle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-26533 | 9.8 | Feb 24 | SQL injection risk in course search module list filter Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
| CVE-2025-26525 | 8.6 | Feb 24 | Arbitrary file read risk through pdfTeX Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
| CVE-2025-26526 | 6.5 | Feb 24 | Feedback response viewing and deletions did not respect Separate Groups mode Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
| CVE-2025-26530 | 6.1 | Feb 24 | Reflected XSS via question bank filter Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10 |
| CVE-2025-26529 | 6.1 | Feb 24 | Stored XSS risk in admin live log Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
| CVE-2025-26528 | 6.1 | Feb 24 | Stored XSS in ddimageortext question type Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
| CVE-2025-26531 | 5.3 | Feb 24 | IDOR in badges allows disabling of arbitrary badges Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
| CVE-2025-26527 | 5.3 | Feb 24 | Non-searchable tags can still be discovered on the tag search page and in the tags block Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
| CVE-2025-26532 | 4.3 | Feb 24 | Teachers can evade trusttext config when restoring glossary entries Affected: 4.5.0 before 4.5.2; 4.4.0 before 4.4.6; 4.3.0 before 4.3.10; 4.1.0 before 4.1.16 |
Showing 9