Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-26527

Non-searchable tags can still be discovered on the tag search page and in the tags block

Description

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moodle Project moodle

Default version status: unaffected

  • 4.5.0 to < 4.5.2affected
  • 4.4.0 to < 4.4.6affected
  • 4.3.0 to < 4.3.10affected
  • 4.1.0 to < 4.1.16affected
  • 4.2.0 to < 4.2.*unknown
  • 0 to < 4.0.*unknown

References