CVE-2026-113608

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

EUVD-2026-105086

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113608

The Configurable Reports block for Moodle (moodle-block_configurablereports) versions prior to 5.3.1 is vulnerable to an SQL injection in the report_sql::prepare_sql() function. The flaw is triggered via the filter_var request parameter within viewreport.php. Low-privileged users authorized to vi...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...