CVE-2025-26526

Medium CVSS: 6.5

Separate Groups mode restrictions were not factored into permission
checks before allowing viewing or deletion of responses in Feedback
activities.

Vendor

Product

CWE

Yayın Tarihi

2025-02-24 20:15:33

Güncelleme

2025-08-08 19:40:46

Source Identifier

patrick@puiterwijk.org

KEV Date Added

CWE-863 Moodle MEDIUM Moodle 2025

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976 https://moodle.org/mod/forum/discuss.php?d=466142

High

CVE-2026-26046

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration…

Medium

CVE-2026-26047

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete…

High

CVE-2026-26045

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va…

Medium

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs…

High

CVE-2025-67849

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt…

High

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o…