https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:47:33.980282+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-moodle-2025-67855 BIT-moodle-2025-67855 — Mooodle: mooodle: information disclosure and script execution via reflected cross-site scripting 2026-10-06T11:47:34.034778+00:00

Affected: Bitnami: moodle

A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 certfr-2025-avi-1113 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T11:47:34.034836+00:00 certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/euvd-2026-267148 EUVD-2026-267148 2026-10-06T11:47:34.034857+00:00 EUVD-2026-267148 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67855 fkie_cve-2025-67855 2026-10-06T11:47:34.034869+00:00

A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.

 https://cve.radiocsirt.org/vuln/ghsa-vwhw-vp9v-q9c9 GHSA-vwhw-vp9v-q9c9 — Moodle vulnerable to Cross-site Scripting 2026-10-06T11:47:34.034893+00:00

Affected: Packagist: moodle/moodle

A flaw was found in Moodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67855 UBUNTU-CVE-2025-67855 2026-10-06T11:47:34.034917+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851 WID-SEC-W-2025-2851 — Moodle: Mehrere Schwachstellen 2026-10-06T11:47:34.034938+00:00

Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.