Filter
AND
AND
Moodle MoodleMoodle: insufficient capability checks when updating the parent of a course category
5.3
First published (updated )
Moodle MoodleMoodle: cache poisoning risk with endpoint revision numbers
5.3
First published (updated )
Moodle MoodleMoodle: xss risk when previewing data in course upload tool
6.1
First published (updated )
Moodle MoodleMoodle: stored xss in quiz grading report via user id number
5.4
First published (updated )
Moodle MoodleMoodle: auto-populated h5p author name causes a potential information leak
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleMoodle: stored xss and potential idor risk in wiki comments
6.5
First published (updated )
Moodle MoodleMoodle: xss risk when using csv grade import method
6.1
First published (updated )
Moodle MoodleMoodle: minor sql injection risk on mnet sso access control page
6.3
First published (updated )
Moodle MoodleIn Moodle, insufficient limitations in some quiz web services made it possible for students to bypas…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleMoodle: course participation report shows roles the user should not see
4.3
First published (updated )
Moodle MoodleMoodle: teacher can access names of users they do not have permission to access
4.3
First published (updated )
Moodle MoodleMoodle: users' name enumeration possible via idor on learning plans page
4.3
First published (updated )
Moodle MoodleMoodle: algebra filter xss when filter is misconfigured
6.1
First published (updated )
Moodle MoodleMoodle: xss risk when outputting database activity filter data
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleMoodle: authenticated arbitrary file read through malformed backup file
6.5
First published (updated )
Moodle MoodleMoodle: reflected xss risk in blog search
6.1
First published (updated )
Moodle MoodleMoodle: reflected xss risk in some returnurl parameters
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleThe mobile auto-login URL required additional sanitizing to prevent an open redirect risk. Versions…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleA flaw was found in moodle where the description user field was not hidden when being set as a hidde…
5.3
First published (updated )