Moodle — система управления образовательными электронными курсами

Moodle does not set the RISK_XSS bit for graders

Moodle Improper Access Control

Moodle vulnerable to Cross-site Scripting

Moodle vulnerable to Cross-Site Request Forgery

Moodle's time-validation implementation allows bypassing intended restrictions

Moodle allows attackers to obtain sensitive calendar-event information

Moodle cross-site scripting (XSS) vulnerability

Moodle multiple cross-site scripting (XSS) vulnerabilities

Moodle allows attackers to obtain username and course information

Moodle allows attackers to bypass a forced-password-change requirement