CVE-2025-26530 HIGH

CVE-2025-26530: Reflected XSS via question bank filter

Vendor Moodle Project
Product moodle
Weakness CWE-79 · XSS
Published February 24, 2025
Last update February 24, 2025
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

The question bank filter required additional sanitizing to prevent a reflected XSS risk.

Key dates

02Disclosure timeline

February 24, 2025 CVE published
February 24, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-11069 westboy CicadasCMS Add Department save cross site scripting CVE-2026-48880 WordPress WP Job Portal plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-58020 WordPress Theater for WordPress plugin <= 0.18.8 - Cross Site Scripting (XSS) vulnerability CVE-2023-2184 WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting CVE-2023-53735 WEBIGniter 28.7.23 Cross-Site Scripting (XSS) in User Creation Process