CVE-2025-26529

High CVSS: 8.3

Description information displayed in the site administration live log
required additional sanitizing to prevent a stored XSS risk.

Vendor

Product

CWE

Yayın Tarihi

2025-02-24 20:15:33

Güncelleme

2025-08-08 19:37:24

Source Identifier

patrick@puiterwijk.org

KEV Date Added

CWE-79 Moodle HIGH Moodle 2025

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145 https://moodle.org/mod/forum/discuss.php?d=466145

High

CVE-2026-26046

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration…

Medium

CVE-2026-26047

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete…

High

CVE-2026-26045

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va…

Medium

CVE-2025-67857

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs…

High

CVE-2025-67849

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt…

High

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o…