[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLb956jOmgMN36LANOMEnm-vYHozb40CwH1HyEmyKb8s":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":30,"kevVulnerabilities":96,"topProductsByCves":97,"seoMetadata":101,"meta":110},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":29},20377,"moodle",3,590,0,466,"2025-04-25","m",[16,20,25],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},113725,465,588,{"id":21,"product_name":22,"version_count":11,"cve_count":23,"kev_count":11,"last_cve_update":24},113726,"saml_authentication",1,"2023-01-12",{"id":26,"product_name":27,"version_count":23,"cve_count":23,"kev_count":11,"last_cve_update":28},113727,"virtual_programming_lab","2024-06-24","Moodle is a technology vendor with 3 tracked products and 590 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[31,40,46,53,58,66,73,79,85,91],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":39},"CVE-2024-43425","A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add\u002Fupdate questions.","2024-11-07",8.1,"v3.1","High",false,0.87536,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":45},"CVE-2022-35650","The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature is only available to teachers, managers and admins by default.","2022-07-25",7.5,0.53652,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":36,"severity":51,"isKev":38,"epssScore":52},"CVE-2021-36393","In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.","2023-03-06",9.8,"Critical",0.52299,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":50,"cvssVersion":36,"severity":51,"isKev":38,"epssScore":57},"CVE-2022-0332","A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.","2022-01-25",0.44005,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":38,"epssScore":65},"CVE-2013-3630","Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.","2013-11-01",4.6,"v2","Medium",0.41673,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":37,"isKev":38,"epssScore":72},"CVE-2018-1133","An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.","2018-05-25",8.8,"v3.0",0.31322,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":36,"severity":51,"isKev":38,"epssScore":78},"CVE-2021-21809","A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.","2021-06-23",9.1,0.24173,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":63,"severity":64,"isKev":38,"epssScore":84},"CVE-2013-4341","Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed.","2013-09-16",4.3,0.21862,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":71,"severity":64,"isKev":38,"epssScore":90},"CVE-2018-1042","Moodle 3.x has Server Side Request Forgery in the filepicker.","2018-01-22",6.5,0.16245,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":70,"cvssVersion":36,"severity":37,"isKev":38,"epssScore":95},"CVE-2020-14321","In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.","2022-08-16",0.16243,[],[98,99,100],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":11,"cve_count":23,"kev_count":11,"last_cve_update":24},{"id":26,"product_name":27,"version_count":23,"cve_count":23,"kev_count":11,"last_cve_update":28},{"title":102,"metaDescription":103,"keywords":104,"structuredData":105},"Moodle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Moodle covering 3 products with 590 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Moodle vulnerabilities, Moodle security, Moodle CVE, Moodle threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":106,"@type":107,"name":108,"description":103,"url":109},"https:\u002F\u002Fschema.org","Organization","Moodle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmoodle",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":111,"apiVersion":112},"2026-10-17T00:41:16.810Z","3.0"]