Description In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam. Remediation References CVE-2016-5013 Related Vulnerabilities MediaWiki CVE-2026-34088 Vulnerability (CVE-2026-34088) XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-26480) WordPress Plugin Widgets for WooCommerce Products on Elementor Security Bypass (1.0.5) WordPress Plugin WatchMan-Site7 Cross-Site Request Forgery (3.0.2) MySQL CVE-2016-0651 Vulnerability (CVE-2016-0651) Severity Medium Classification CVE-2016-5013 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities