Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersMoodle does not set the RISK_XSS bit for graders
Moodle cross-site scripting (XSS) vulnerabilities
Moodle improper access control
Moodle allows attackers to read SCORM contents
Moodle Information Disclosure
Moodle XSS Vulnerability
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
Moodle allows attackers to obtain manager privileges
Moodle allows attackers to delete files
Moodle allows attackers to enter additional answer attempts
Moodle does not properly implement group-based access restrictions
Moodle mishandles group-based authorization checks
Moodle uses predictable password-recovery tokens
Moodle multiple cross-site scripting (XSS) vulnerabilities
Moodle cross-site scripting (XSS) vulnerability
Moodle cross-site scripting (XSS) vulnerability
Moodle cross-site request forgery (CSRF) vulnerability
Moodle multiple cross-site scripting (XSS) vulnerabilities
Moodle cross-site scripting (XSS) vulnerability
Moodle open redirect vulnerability
Moodle Arbitrary Redirect
Moodle allows attackers to bypass file-management restrictions
Moodle allows attackers to obtain sensitive course-structure information
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.