CVE-2026-102581
EUVD-2026-8972030.09.2026, 09:17
A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 𝑥 < 4.5.13 |
| moodle | moodle | 5.0.0 ≤ 𝑥 < 5.0.9 |
| moodle | moodle | 5.1.0 ≤ 𝑥 < 5.1.6 |
| moodle | moodle | 5.2.0 ≤ 𝑥 < 5.2.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases