https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T16:29:00.461541+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10922 bdu:2015-10922 2026-10-25T16:29:00.575148+00:00 bdu:2015-10922 https://cve.radiocsirt.org/vuln/certfr-2015-avi-115 certfr-2015-avi-115 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-25T16:29:00.575187+00:00 certfr-2015-avi-115 https://cve.radiocsirt.org/vuln/cnvd-2015-03633 cnvd-2015-03633 2026-10-25T16:29:00.575208+00:00 cnvd-2015-03633 https://cve.radiocsirt.org/vuln/euvd-2026-90909 EUVD-2026-90909 2026-10-25T16:29:00.575221+00:00 EUVD-2026-90909 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2269 fkie_cve-2015-2269 2026-10-25T16:29:00.575233+00:00

Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) alt or (2) title attribute in an IMG element.

 https://cve.radiocsirt.org/vuln/ghsa-cp39-43xr-2wrp GHSA-cp39-43xr-2wrp — Moodle XSS Vulnerability 2026-10-25T16:29:00.575261+00:00

Affected: Packagist: moodle/moodle

Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) alt or (2) title attribute in an IMG element.

 https://cve.radiocsirt.org/vuln/gsd-2015-2269 gsd-2015-2269 2026-10-25T16:29:00.575286+00:00 gsd-2015-2269 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2269 Withdrawn: UBUNTU-CVE-2015-2269 2026-10-25T16:29:00.575297+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle

Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) alt or (2) title attribute in an IMG element.