Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/moodle/moodle@5.1.0-beta
purl pkg:composer/moodle/moodle@5.1.0-beta
Next non-vulnerable version 5.1.2
Latest non-vulnerable version 5.1.2
Risk score 4.0
Vulnerabilities affecting this package (12)
Advisory Summary Fixed in package version
GHSA-mhf6-pp52-8wqj
Aliases:
CVE-2025-67849
Moodle Cross-site Scripting (XSS) vulnerability A flaw was found in Moodle. This Cross-site Scripting (XSS) vulnerability, caused by improper sanitization …
5.1.1
Vulnerable
GHSA-j5jv-w5cw-j9ff
Aliases:
CVE-2025-67848
Moodle authentication bypass vulnerability A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through …
5.1.1
Vulnerable
GHSA-cg8j-5cr2-568q
Aliases:
CVE-2026-26047
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits A Denial of Service vulnerability was …
5.1.2
Not vulnerable
GHSA-5cx4-w4fh-fr57
Aliases:
CVE-2025-67853
Moodle Affected by Improper Restriction of Excessive Authentication Attempts A flaw was found in Moodle. A remote attacker could exploit …
5.1.1
Vulnerable
GHSA-vwhw-vp9v-q9c9
Aliases:
CVE-2025-67855
Moodle vulnerable to Cross-site Scripting A flaw was found in Moodle. A remote attacker could exploit a reflected Cross-Site Scripting …
5.1.1
Vulnerable
GHSA-qv78-6gpp-hm68
Aliases:
CVE-2025-67852
Moodle Open Redirect vulnerability A flaw was found in Moodle. An Open Redirect vulnerability in the OAuth login flow allows …
5.1.1
Vulnerable
GHSA-hcm6-q6pc-xfhm
Aliases:
CVE-2025-67856
Moodle has an authorization logic flaw A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete …
5.1.1
Vulnerable
GHSA-qfh6-h7j6-fvjv
Aliases:
CVE-2025-67851
Moodle formula injection vulnerability A flaw was found in Moodle. This formula injection vulnerability occurs when data fields are exported …
5.1.1
Vulnerable
GHSA-8jrv-wx83-w3xj
Aliases:
CVE-2025-67857
Moodle Inserts Sensitive Information Into Sent Data A flaw was found in moodle. During anonymous assignment submissions, user identifiers were …
5.1.1
Vulnerable
GHSA-6mmv-f6c6-v6q8
Aliases:
CVE-2025-67850
Moodle vulnerable to Cross-site Scripting A flaw was found in Moodle. This vulnerability, known as Cross-site Scripting (XSS), occurs due …
5.1.1
Vulnerable
GHSA-ggxq-2mg9-8966
Aliases:
CVE-2026-26045
Moodle has a Remote Code Execution risk via file restore A flaw was identified in Moodle’s backup restore functionality where …
5.1.2
Not vulnerable
GHSA-xvmh-25jw-gmmm
Aliases:
CVE-2025-67847
Moodle affected by a code injection vulnerability A flaw was found in Moodle. An attacker with access to the restore …
5.1.1
Vulnerable
This package is not known to fix any advisories.