A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.
2026年9月30日
CVE-2026-102581 [MEDIUM] – A flaw was found in Moodle. Insufficient output escaping in templates used to display foru
📑 文章目录



