Moodle — система управления образовательными электронными курсами

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.

A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization.

A flaw was found in Moodle. An authenticated attacker can supply an im ...

A flaw was found in Moodle. The manual enrolment management page did n ...

A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 add ...

A flaw was found in Moodle. User list filters do not properly enforce ...

A flaw was found in Moodle. Due to a missing capability check, a low-p ...

A flaw was found in Moodle. The XML grade import feature lacks proper ...

A flaw was found in Moodle. Insufficient sanitization of username inpu ...

A flaw was found in Moodle. An incorrect capability check in the artif ...