https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:40:55.667834+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-445 certfr-2019-avi-445 — De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T02:40:55.671916+00:00 certfr-2019-avi-445 https://cve.radiocsirt.org/vuln/cnvd-2019-35813 cnvd-2019-35813 2026-10-03T02:40:55.671952+00:00 cnvd-2019-35813 https://cve.radiocsirt.org/vuln/euvd-2026-56648 EUVD-2026-56648 2026-10-03T02:40:55.671967+00:00 EUVD-2026-56648 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14827 fkie_cve-2019-14827 2026-10-03T02:40:55.671979+00:00

A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper tags that were included in template contexts were not being escaped before that context was injected into another Mustache helper, which could result in script injection in some templates. This affects versions 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions.

 https://cve.radiocsirt.org/vuln/ghsa-9r7q-rgxm-f2hm GHSA-9r7q-rgxm-f2hm 2026-10-03T02:40:55.672005+00:00

A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper tags that were included in template contexts were not being escaped before that context was injected into another Mustache helper, which could result in script injection in some templates. This affects versions 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions.

 https://cve.radiocsirt.org/vuln/gsd-2019-14827 gsd-2019-14827 2026-10-03T02:40:55.672021+00:00 gsd-2019-14827 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14827 UBUNTU-CVE-2019-14827 2026-10-03T02:40:55.672032+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper tags that were included in template contexts were not being escaped before that context was injected into another Mustache helper, which could result in script injection in some templates. This affects versions 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions.