Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersMoodle Cross-Site Request Forgery (CSRF)
Moodle Minor SQL injection risk in admin user browsing
Moodle remote code execution
Moodle Stored Cross-site Scripting and page denial of service
Moodle No groups filtering in H5P activity attempts report
Moodle Improper Authentication
Moodle type juggling vulnerability
Moodle Incorrect Authorization
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Moodle Improper Encoding or Escaping of Output
Moodle Cross-site Scripting vulnerability
Moodle Incorrect Authorization vulnerability
Moodle reflected XSS Vulnerability
Moodle XSS Vulnerability
Moodle LTI module reflected XSS risk
Moodle Open redirect risk in mobile auto-login feature
Moodle PostScript Code Injection
Moodle Arbitrary file read when importing lesson questions
Moodle Stored XSS and blind SSRF possible via SCORM track details
Moodle Persistent Cross-site Scripting (XSS)
Moodle contains CSRF vulnerability
Moodle Insecure direct object reference (IDOR) in a calendar web service
Moodle command execution vulnerability exists in the default legacy spellchecker plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.