Description
Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.
Remediation
References
Related Vulnerabilities
WordPress Plugin Quttera Web Malware Scanner Security Bypass (3.0.8.65)
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.4)
WordPress Plugin Knews Multilingual Newsletters 'ff' Parameter Cross-Site Scripting (1.1.0)
WordPress Plugin Nmedia WordPress Member Conversation 'doupload.php' Arbitrary File Upload (1.3)
Moodle Resource Management Errors Vulnerability (CVE-2015-2268)