Search for packages
| purl | pkg:composer/moodle/moodle@4.2.11 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-w29j-8phw-ffjf
Aliases: CVE-2025-62401 |
Moodle has a time restriction bypass An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, … |
Vulnerable |
|
GHSA-m58f-9pvv-8mp2
Aliases: CVE-2025-62399 |
Moodle vulnerable to brute-force password guesses Moodle's mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, … |
Vulnerable |
|
GHSA-422v-w6c5-vq42
Aliases: CVE-2025-62400 |
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view … |
Vulnerable |
|
GHSA-f6mh-79vh-2hv7
Aliases: CVE-2024-28593 |
Cross-site Scripting in Moodle Chat The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A … | There are no reported fixed by versions. |
|
GHSA-9gqp-3g28-w9xc
Aliases: CVE-2023-5547 |
Moodle Cross-site Scripting vulnerability The course upload preview contained an XSS risk for users uploading unsafe data. |
Vulnerable |
|
GHSA-28gc-4qq5-8q26
Aliases: CVE-2023-5541 |
Moodle Cross-site Scripting vulnerability The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it … |
Vulnerable |
|
GHSA-3xxm-3g3c-w579
Aliases: CVE-2023-5539 |
Moodle Code Injection vulnerability A remote code execution risk was identified in the Lesson activity. By default this was only … |
Vulnerable |
|
GHSA-j5xf-gv89-g422
Aliases: CVE-2023-5544 |
Moodle Cross-site Scripting vulnerability Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential … |
Vulnerable |
|
GHSA-fm5h-58g2-4m3f
Aliases: CVE-2023-5549 |
Moodle Improper Access Control vulnerability Insufficient web service capability checks made it possible to move categories a user had permission … |
Vulnerable |
|
GHSA-26fg-v32r-h663
Aliases: CVE-2023-5545 |
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability H5P metadata automatically populated the author with the user's username, … |
Vulnerable |
|
GHSA-cwh2-q44x-5w3c
Aliases: CVE-2023-5548 |
Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability Stronger revision number limitations were required on file serving endpoints … |
Vulnerable |
|
GHSA-8mm2-m2gp-c6x2
Aliases: CVE-2023-5542 |
Moodle Improper Access Control vulnerability Students in "Only see own membership" groups could see other students in the group, which … |
Vulnerable |
|
GHSA-w8x2-w4qr-v3x4
Aliases: CVE-2023-5540 |
Moodle Code Injection vulnerability A remote code execution risk was identified in the IMSCP activity. By default this was only … |
Vulnerable |
|
GHSA-9724-h8p7-r3jv
Aliases: CVE-2023-5546 |
Moodle Cross-site Scripting vulnerability ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS … |
Vulnerable |
|
GHSA-cg8j-5cr2-568q
Aliases: CVE-2026-26047 |
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits A Denial of Service vulnerability was … |
Not vulnerable |
|
GHSA-ggxq-2mg9-8966
Aliases: CVE-2026-26045 |
Moodle has a Remote Code Execution risk via file restore A flaw was identified in Moodle’s backup restore functionality where … |
Not vulnerable |
|
GHSA-xvmh-25jw-gmmm
Aliases: CVE-2025-67847 |
Moodle affected by a code injection vulnerability A flaw was found in Moodle. An attacker with access to the restore … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-cq5f-wv7p-5gfc
|
Moodle leaks user names A vulnerability was found in Moodle. It is possible for users with the "send message" capability … |
CVE-2024-48896
|
|
GHSA-x3x9-349x-2485
|
moodle: IDOR in edit/delete RSS feed A vulnerability was found in Moodle. Additional checks are required to ensure users can … |
CVE-2024-48897
|
|
GHSA-mg54-p2wj-5ph7
|
moodle: IDOR when fetching report schedules A vulnerability was found in Moodle. Additional checks are required to ensure users can … |
CVE-2024-48901
|
|
GHSA-fjq9-452g-jg3q
|
moodle: Some users can delete audiences of other reports A vulnerability was found in Moodle. Users with access to delete … |
CVE-2024-48898
|