2720 matches found
CVE-2025-11238
CVE-2025-11238 concerns the WordPress plug‑in Watu Quiz. The vulnerability is a Stored Cross‑Site Scripting flaw triggered by the HTTP Referer header due to insufficient input sanitization and output escaping when the “Save source URL” option is enabled. Affected versions are those less than or e...
WordPress Watu Quiz plugin <= 3.4.4 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer vulnerability
Unauthenticated Stored Cross-Site Scripting via HTTP Referer vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin Watu Quiz versions = 3.4.4...
PT-2025-43703
Name of the Vulnerable Software and Affected Versions Watu Quiz plugin for WordPress versions prior to 3.4.5 Description The Watu Quiz plugin for WordPress is susceptible to Stored Cross-Site Scripting through the HTTP Referer header. This occurs because of inadequate input sanitization and outpu...
Moodle sends quiz-related messages to inactive/suspended users
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
GHSA-8FCV-4QP9-PG32 Moodle sends quiz-related messages to inactive/suspended users
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
CVE-2025-62394
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
UBUNTU-CVE-2025-62394
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
Incorrect Authorization
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization due to the insufficient enrolment validation in quiz notifications. An attacker can obtain limited course information by receiving quiz-related messages intended for active...
CVE-2025-62394 Moodle: quiz notifications sent to suspended participants
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
EUVD-2025-35672
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
CVE-2025-62394
CVE-2025-62394 affects Moodle where enrolment verification fails when sending quiz notifications, allowing suspended or inactive users to receive quiz messages and potentially leak limited course information. The issue is described in multiple sources (OSV, Nessus variants, Fedora advisories) as ...
CVE-2025-62394 Moodle: quiz notifications sent to suspended participants
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
CVE-2025-62394 Moodle: quiz notifications sent to suspended participants
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
PT-2025-43442
Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description Moodle did not properly check enrolment status when sending notifications about quizzes. This allowed suspended or inactive users to receive quiz-related messages, potentially revealing limite...
Moodle 安全漏洞
Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from failure to properly validate enrollment status, which could cause...
Moodle Multiple Vulnerabilities (MSA-25-0043, MSA-25-0045)
Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
CVE-2025-62394
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information...
EUVD-2015-9258
Malware in sbrugna...