Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-26533

SQL injection risk in course search module list filter

Description

An SQL injection risk was identified in the module list filter within course search.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moodle Project moodle

Default version status: unaffected

  • 4.5.0 to < 4.5.2affected
  • 4.4.0 to < 4.4.6affected
  • 4.3.0 to < 4.3.10affected
  • 4.1.0 to < 4.1.16affected
  • 0 to < 4.0.*unknown
  • 4.2.0 to < 4.2.*unknown

References