CVE-2022-35650

CVE-2022-35650 Questa è una lettura arbitraria di file in Moodle. Prerequisiti Devi aver compromesso un utente a livello di insegnante o amministratore. Passaggi 1. Clona questo repository: root@kitploit: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. Esegui questo comando per...

CVE-2026-79615 Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

The Quiz and Survey Master QSM WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other...

Moodle-authenticated-RCE

Moodle 4.4.0 - Esecuzione remota di codice autenticata CVE-2024-43425 Exploit CVE: CVE-2024-43425 Versioni affette Moodle 4.4 fino a 4.4.1 Moodle 4.3 fino a 4.3.5 Moodle 4.2 fino a 4.2.8 Moodle 4.1 fino a 4.1.11 Descrizione Questo exploit sfrutta una vulnerabilità di esecuzione remota di codice R...

EUVD-2022-4709

Malicious code in bioql PyPI...

EUVD-2025-4271

Malicious code in bioql PyPI...

EUVD-2022-2237

Malicious code in bioql PyPI...

BIT-MOODLE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

Moodle 4.4.4 < 4.4.5 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Moodle 4.3.x < 4.3.8 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Moodle 4.5.x < 4.5.1 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Cross-site Scripting (XSS)

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to missing sanitization in the question bank filter. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious scrip...

GHSA-4W32-C9G7-27QX Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

UBUNTU-CVE-2025-26530

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

CVE-2025-26530 concerns Moodle where the question bank filter allowed a reflected XSS risk due to insufficient sanitization. The connected documents corroborate a reflected XSS in Moodle’s question bank filter, without detailing affected versions or patches in the provided sources. The CVE descri...

PT-2025-7785 · Red Os · Red Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a reflected XSS risk due to insufficient sanitizing in the question bank filter. Recommendations: At the moment, there is no information about a newer version that...