Vulnerabilidades de Jcrodriguez-dis

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Jcrodriguez-dis: 1 registro(s), com severidade, exploração e correções.

Moodle-mod Vpl 1

Somente exploradas (KEV) →

CVE-2026-113683 Média · 6.1 CWE-79 20/10/2026

VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename

VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs when a user holding mod/vpl:similarity opens it, performing actions or disclosing data under their session.