MP
Vendor
Moodle Project
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-26533 | MO moodle Moodle Project | 9.8 | Feb 24 | SQL injection risk in course search module list filter |
| CVE-2025-26532 | MO moodle Moodle Project | 4.3 | Feb 24 | Teachers can evade trusttext config when restoring glossary entries |
| CVE-2025-26531 | MO moodle Moodle Project | 5.3 | Feb 24 | IDOR in badges allows disabling of arbitrary badges |
| CVE-2025-26530 | MO moodle Moodle Project | 6.1 | Feb 24 | Reflected XSS via question bank filter |
| CVE-2025-26529 | MO moodle Moodle Project | 6.1 | Feb 24 | Stored XSS risk in admin live log |
| CVE-2025-26528 | MO moodle Moodle Project | 6.1 | Feb 24 | Stored XSS in ddimageortext question type |
| CVE-2025-26527 | MO moodle Moodle Project | 5.3 | Feb 24 | Non-searchable tags can still be discovered on the tag search page and in the tags block |
| CVE-2025-26526 | MO moodle Moodle Project | 6.5 | Feb 24 | Feedback response viewing and deletions did not respect Separate Groups mode |
| CVE-2025-26525 | MO moodle Moodle Project | 8.6 | Feb 24 | Arbitrary file read risk through pdfTeX |