CVE-2026-58337

A flaw was found in Moodle. The user homepage preference setting lacked a necessary token, making it vulnerable to a Cross-Site Request Forgery CSRF attack. A remote attacker could exploit this to trick a user into performing unwanted actions on the Moodle platform without their knowledge,...