Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2025-3643

A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk.

CVSS v3:

  • Severity: Unknown
  • Score:
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
moodle / moodle - 4.1.18
moodle / moodle 4.3.0-beta 4.3.12
moodle / moodle 4.4.0-beta 4.4.8
moodle / moodle 4.5.0-beta 4.5.4
moodle / moodle 4.3.0 4.3.12
moodle / moodle 4.4.0 4.4.8
moodle / moodle 4.5.0 4.5.4
moodle / moodle - 4.1.18