Moodle CVE-2023-5548

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell

A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. Rated critical severi

A flaw was found in Moodle. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authenticatio

In Moodle 2.x and 3.x, SQL injection can occur via user preferences. Rated critical severity (CVSS 9.8), this vulnerabil

The Moodle LMS Jmol plugin version 6.1 and earlier contains a path traversal vulnerability in jsmol.php. The query param

Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, an

Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remo

Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows re

moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional re

An issue was discovered in Moodle 3.x. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low a

Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injectio

Moodle 3.10.3 contains a persistent cross-site scripting vulnerability in the calendar event subtitle field that allows