Moodle 4.3.x < 4.3.10 Multiple Vulnerabilities

🗓️ 10 Apr 2025 00:00:00Reported by This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.Type

nessus

nessus🔗 www.tenable.com👁 9 Views

Moodle versions prior to 4.3.10 have multiple vulnerabilities, including SQL injection and XSS risks.

Reporter	Title	Published	Views	Family All 244
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller is affected by vulnerabilities	15 Apr 202503:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in requirejs	5 Sep 202422:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	12 Dec 202402:18	–	ibm
GithubExploit	Exploit for Cross-site Scripting in Moodle	12 Apr 202523:17	–	githubexploit
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of measures to protect the SQL query structure, allows attackers to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
moodle	www.moodle.org/mod/forum/discuss.php
moodle	www.moodle.org/mod/forum/discuss.php
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.moodle.org/gw
git	www.git.moodle.org/gw
moodle	www.moodle.org/mod/forum/discuss.php
git	www.git.moodle.org/gw
moodle	www.moodle.org/mod/forum/discuss.php
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

31 Jul 2025 00:00Current

7High risk

Vulners AI Score7

CVSS 3.19.8 - 10

EPSS0.00961

SSVC

moodle vulnerabilities sql injection risk stored xss risk reflected xss risk insufficient sanitizing user permissions security upgrade tag visibility separate groups mode arbitrary file read.