Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28331) CVE-2023-28331 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28332) CVE-2023-28332 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35131) CVE-2023-35131 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-46858) CVE-2023-46858 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-29374) CVE-2024-29374 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-33997) CVE-2024-33997 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-33998) CVE-2024-33998 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34000) CVE-2024-34000 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-37674) CVE-2024-37674 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-38274) CVE-2024-38274 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-43437) CVE-2024-43437 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-43439) CVE-2024-43439 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-3643) CVE-2025-3643 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-26528) CVE-2025-26528 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-26529) CVE-2025-26529 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-26530) CVE-2025-26530 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67849) CVE-2025-67849 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67850) CVE-2025-67850 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67855) CVE-2025-67855 CWE-707 CWE-707 Medium Moodle Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2016-5013) CVE-2016-5013 CWE-138 CWE-138 Medium Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4305) CVE-2009-4305 CWE-138 CWE-138 Medium Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4292) CVE-2011-4292 CWE-138 CWE-138 Medium Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2363) CVE-2012-2363 CWE-138 CWE-138 Medium Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-3395) CVE-2012-3395 CWE-138 CWE-138 Medium Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-25700) CVE-2020-25700 CWE-138 CWE-138 Medium Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-35132) CVE-2023-35132 CWE-138 CWE-138 Medium Moodle Improper Privilege Management Vulnerability (CVE-2017-7489) CVE-2017-7489 CWE-269 CWE-269 Medium Moodle Improper Privilege Management Vulnerability (CVE-2017-7532) CVE-2017-7532 CWE-269 CWE-269 Medium Moodle Improper Privilege Management Vulnerability (CVE-2018-1134) CVE-2018-1134 CWE-269 CWE-269 Medium Moodle Improper Privilege Management Vulnerability (CVE-2023-5549) CVE-2023-5549 CWE-269 CWE-269 Medium Moodle Improper Validation of Integrity Check Value Vulnerability (CVE-2021-20184) CVE-2021-20184 CWE-354 CWE-354 Medium Moodle Inappropriate Encoding for Output Context Vulnerability (CVE-2024-34006) CVE-2024-34006 CWE-838 CWE-838 Medium Moodle Incorrect Authorization Vulnerability (CVE-2020-25701) CVE-2020-25701 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2021-20282) CVE-2021-20282 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2021-20283) CVE-2021-20283 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2021-40692) CVE-2021-40692 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2022-0984) CVE-2022-0984 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2024-43433) CVE-2024-43433 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2024-48897) CVE-2024-48897 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2024-48901) CVE-2024-48901 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2025-3644) CVE-2025-3644 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2025-3645) CVE-2025-3645 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2025-3647) CVE-2025-3647 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2025-26526) CVE-2025-26526 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2025-26531) CVE-2025-26531 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2025-26532) CVE-2025-26532 CWE-863 CWE-863 Medium Moodle Incorrect Authorization Vulnerability (CVE-2025-62394) CVE-2025-62394 CWE-863 CWE-863 Medium Moodle Incorrect Default Permissions Vulnerability (CVE-2012-1157) CVE-2012-1157 CWE-276 CWE-276 Medium Moodle Incorrect Default Permissions Vulnerability (CVE-2024-43430) CVE-2024-43430 CWE-276 CWE-276 Medium Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-1754) CVE-2020-1754 CWE-732 CWE-732 Medium Moodle Insertion of Sensitive Information into Log File Vulnerability (CVE-2018-10889) CVE-2018-10889 CWE-532 CWE-532 Medium Moodle Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-67857) CVE-2025-67857 CWE-201 CWE-201 Medium Moodle Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-1755) CVE-2020-1755 CWE-345 CWE-345 Medium Moodle Insufficient Verification of Data Authenticity Vulnerability (CVE-2023-5548) CVE-2023-5548 CWE-345 CWE-345 Medium Moodle Missing Authorization Vulnerability (CVE-2019-10187) CVE-2019-10187 CWE-862 CWE-862 Medium Moodle Missing Authorization Vulnerability (CVE-2019-14883) CVE-2019-14883 CWE-862 CWE-862 Medium Moodle Missing Authorization Vulnerability (CVE-2024-45689) CVE-2024-45689 CWE-862 CWE-862 Medium Moodle Missing Authorization Vulnerability (CVE-2024-48898) CVE-2024-48898 CWE-862 CWE-862 Medium Moodle Missing Authorization Vulnerability (CVE-2025-32045) CVE-2025-32045 CWE-862 CWE-862 Medium Moodle Numeric Errors Vulnerability (CVE-2011-4305) CVE-2011-4305 Medium Moodle Other Vulnerability (CVE-2004-0725) CVE-2004-0725 Medium Moodle Other Vulnerability (CVE-2004-1425) CVE-2004-1425 Medium Moodle Other Vulnerability (CVE-2004-1711) CVE-2004-1711 Medium Moodle Other Vulnerability (CVE-2004-1978) CVE-2004-1978 Medium Moodle Other Vulnerability (CVE-2006-4784) CVE-2006-4784 Medium Moodle Other Vulnerability (CVE-2006-4786) CVE-2006-4786 Medium Moodle Other Vulnerability (CVE-2006-4937) CVE-2006-4937 Medium Moodle Other Vulnerability (CVE-2006-4938) CVE-2006-4938 Medium Moodle Other Vulnerability (CVE-2006-4939) CVE-2006-4939 Medium Moodle Other Vulnerability (CVE-2006-4940) CVE-2006-4940 Medium Moodle Other Vulnerability (CVE-2006-4941) CVE-2006-4941 Medium Moodle Other Vulnerability (CVE-2006-4942) CVE-2006-4942 Medium Moodle Other Vulnerability (CVE-2006-4943) CVE-2006-4943 Medium Moodle Other Vulnerability (CVE-2006-5219) CVE-2006-5219 Medium Moodle Other Vulnerability (CVE-2006-6625) CVE-2006-6625 Medium 1...52535455...121 53 / 121
