CVE-2025-67849: Moodle: moodle: cross-site scripting (xss) via improper sanitization of ai prompt responses
A cross-site scripting (XSS) vulnerability existed due to improper sanitization of AI prompt responses. Attackers could inject HTML or script into pages viewed by other users, potentially leading to session theft or UI manipulation
Other sources
A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67849?
CVE-2025-67849 is classified as a high severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2025-67849?
To remediate CVE-2025-67849, you should update Moodle to versions 5.1.1, 5.0.4, 4.5.8, 4.4.12, or 4.1.22.
What type of vulnerability is CVE-2025-67849?
CVE-2025-67849 is a cross-site scripting (XSS) vulnerability caused by improper sanitization of AI prompt responses.
Who is affected by CVE-2025-67849?
CVE-2025-67849 affects users of Moodle across multiple versions prior to the remediation updates.
What are the potential impacts of CVE-2025-67849?
The potential impacts of CVE-2025-67849 include session hijacking and unauthorized execution of scripts on behalf of other users.