Description
The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Cookies Policy Cross-Site Scripting (1.6.2)
WordPress Plugin Taxonomy Images Multiple Unspecified Vulnerabilities (0.6)
Plone CMS Weak Password Requirements Vulnerability (CVE-2020-7940)
Drupal Core 7.x Remote Code Execution (7.0 - 7.57)
Grafana Files or Directories Accessible to External Parties Vulnerability (CVE-2026-33380)