CVE-2025-26530
Reflected XSS via question bank filter
Summary
Reflected XSS via question bank filter
Original description
The description as published by the source.
The question bank filter required additional sanitizing to prevent a reflected XSS risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.3.0"},{"fixed":"4.3.10"},{"introduced":"4.4.0"},{"fixed":"4.4.6"},{"introduced":"4.5.0"},{"fixed":"4.5.2"}]}]
References
- advisory moodle.org
- advisory nvd.nist.gov
- advisory github.com
- patch git.moodle.org