Search for packages
| purl | pkg:composer/moodle/moodle@5.0.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-mhf6-pp52-8wqj
Aliases: CVE-2025-67849 |
Moodle Cross-site Scripting (XSS) vulnerability A flaw was found in Moodle. This Cross-site Scripting (XSS) vulnerability, caused by improper sanitization … |
Vulnerable |
|
GHSA-j5jv-w5cw-j9ff
Aliases: CVE-2025-67848 |
Moodle authentication bypass vulnerability A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through … |
Vulnerable |
|
GHSA-cg8j-5cr2-568q
Aliases: CVE-2026-26047 |
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits A Denial of Service vulnerability was … |
Not vulnerable |
|
GHSA-5cx4-w4fh-fr57
Aliases: CVE-2025-67853 |
Moodle Affected by Improper Restriction of Excessive Authentication Attempts A flaw was found in Moodle. A remote attacker could exploit … |
Vulnerable |
|
GHSA-vwhw-vp9v-q9c9
Aliases: CVE-2025-67855 |
Moodle vulnerable to Cross-site Scripting A flaw was found in Moodle. A remote attacker could exploit a reflected Cross-Site Scripting … |
Vulnerable |
|
GHSA-qv78-6gpp-hm68
Aliases: CVE-2025-67852 |
Moodle Open Redirect vulnerability A flaw was found in Moodle. An Open Redirect vulnerability in the OAuth login flow allows … |
Vulnerable |
|
GHSA-hcm6-q6pc-xfhm
Aliases: CVE-2025-67856 |
Moodle has an authorization logic flaw A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete … |
Vulnerable |
|
GHSA-qfh6-h7j6-fvjv
Aliases: CVE-2025-67851 |
Moodle formula injection vulnerability A flaw was found in Moodle. This formula injection vulnerability occurs when data fields are exported … |
Vulnerable |
|
GHSA-8jrv-wx83-w3xj
Aliases: CVE-2025-67857 |
Moodle Inserts Sensitive Information Into Sent Data A flaw was found in moodle. During anonymous assignment submissions, user identifiers were … |
Vulnerable |
|
GHSA-6mmv-f6c6-v6q8
Aliases: CVE-2025-67850 |
Moodle vulnerable to Cross-site Scripting A flaw was found in Moodle. This vulnerability, known as Cross-site Scripting (XSS), occurs due … |
Vulnerable |
|
GHSA-ggxq-2mg9-8966
Aliases: CVE-2026-26045 |
Moodle has a Remote Code Execution risk via file restore A flaw was identified in Moodle’s backup restore functionality where … |
Not vulnerable |
|
GHSA-xvmh-25jw-gmmm
Aliases: CVE-2025-67847 |
Moodle affected by a code injection vulnerability A flaw was found in Moodle. An attacker with access to the restore … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-w29j-8phw-ffjf
|
Moodle has a time restriction bypass An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, … |
CVE-2025-62401
|
|
GHSA-rjcm-7v2p-9265
|
Moodle course access permissions are not properly checked in course_output_fragment_course_overview A flaw was found in the course overview output function … |
CVE-2025-62393
|
|
GHSA-m58f-9pvv-8mp2
|
Moodle vulnerable to brute-force password guesses Moodle's mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, … |
CVE-2025-62399
|
|
GHSA-422v-w6c5-vq42
|
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view … |
CVE-2025-62400
|
|
GHSA-c5cj-xp43-qcc3
|
Moodle's error handling leads to sensitive information disclosure An error-handling issue in the Moodle router (r.php) could cause the application … |
CVE-2025-62396
|
|
GHSA-8fcv-4qp9-pg32
|
Moodle sends quiz-related messages to inactive/suspended users Moodle failed to verify enrolment status correctly when sending quiz notifications. As a … |
CVE-2025-62394
|
|
GHSA-25wf-7x6c-wmpf
|
Moodle does not properly enforce MFA A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under … |
CVE-2025-62398
|