https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:20:54.638559+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04908 bdu:2022-04908 2026-10-03T04:20:54.739268+00:00 bdu:2022-04908 https://cve.radiocsirt.org/vuln/bit-moodle-2022-35653 BIT-moodle-2022-35653 2026-10-03T04:20:54.739309+00:00

Affected: Bitnami: moodle

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-653 certfr-2022-avi-653 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une exécution… 2026-10-03T04:20:54.739346+00:00 certfr-2022-avi-653 https://cve.radiocsirt.org/vuln/cnvd-2022-54914 cnvd-2022-54914 2026-10-03T04:20:54.739365+00:00 cnvd-2022-54914 https://cve.radiocsirt.org/vuln/euvd-2026-18230 EUVD-2026-18230 2026-10-03T04:20:54.739378+00:00 EUVD-2026-18230 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35653 fkie_cve-2022-35653 2026-10-03T04:20:54.739389+00:00

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.

 https://cve.radiocsirt.org/vuln/ghsa-62wh-m4jr-233r GHSA-62wh-m4jr-233r — Moodle LTI module reflected XSS risk 2026-10-03T04:20:54.739414+00:00

Affected: Packagist: moodle/moodle

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.

 https://cve.radiocsirt.org/vuln/gsd-2022-35653 gsd-2022-35653 2026-10-03T04:20:54.739440+00:00 gsd-2022-35653 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-35653 UBUNTU-CVE-2022-35653 2026-10-03T04:20:54.739450+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.