Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requestsEPSS 0.5%Sep 23, 2026
- Medium5.1Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter.EPSS 0.3%May 10, 2026
- Critical9.6mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser.EPSS 0.3%Mar 18, 2026
- Medium6.5A denial-of-service vulnerability was identified in Moodle’s TeX formula editor.Feb 21, 2026
- High7.2A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection.Feb 21, 2026
- High7.2A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing.Feb 21, 2026
- UnknownMoodle moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVNov 5, 2025
- Unknowngeoffrowland jmol Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJun 23, 2025
- Unknowngeoffrowland jmol Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJun 23, 2025
- Medium5.3A vulnerability classified as problematic was found in Catalyst User Key Authentication Plugin 20220819 on Moodle.EPSS 47.0%May 10, 2025
- UnknownMoodle moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVFeb 15, 2024
11 records · page 1 of 1
PreviousNext