https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:41:56.099311+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-moodle-2025-67849 BIT-moodle-2025-67849 — Moodle: moodle: cross-site scripting (xss) via improper sanitization of ai prompt responses 2026-10-06T09:41:56.168451+00:00

Affected: Bitnami: moodle

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 certfr-2025-avi-1113 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T09:41:56.168507+00:00 certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/euvd-2026-271047 EUVD-2026-271047 2026-10-06T09:41:56.168528+00:00 EUVD-2026-271047 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67849 fkie_cve-2025-67849 2026-10-06T09:41:56.168541+00:00

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.

 https://cve.radiocsirt.org/vuln/ghsa-mhf6-pp52-8wqj GHSA-mhf6-pp52-8wqj — Moodle Cross-site Scripting (XSS) vulnerability 2026-10-06T09:41:56.168563+00:00

Affected: Packagist: moodle/moodle

A flaw was found in Moodle. This Cross-site Scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67849 UBUNTU-CVE-2025-67849 2026-10-06T09:41:56.168585+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851 WID-SEC-W-2025-2851 — Moodle: Mehrere Schwachstellen 2026-10-06T09:41:56.168605+00:00

Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.