https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:39:31 +0000 https://cve.radiocsirt.org/vuln/bit-moodle-2025-67849 <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> https://cve.radiocsirt.org/vuln/bit-moodle-2025-67849 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/euvd-2026-271047 EUVD-2026-271047 https://cve.radiocsirt.org/vuln/euvd-2026-271047 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67849 <p>A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> <p>A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-67849 https://cve.radiocsirt.org/vuln/ghsa-mhf6-pp52-8wqj <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A flaw was found in Moodle. This Cross-site Scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A flaw was found in Moodle. This Cross-site Scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> https://cve.radiocsirt.org/vuln/ghsa-mhf6-pp52-8wqj https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67849 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67849 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851 <p>Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851