CVE-2026-119554

A flaw was found in Moodle's External database enrolment plugin. This vulnerability allows an authenticated attacker with course editing privileges to inject malicious SQL Structured Query Language commands through the course identification number field. During scheduled synchronization with...