~ / search / GHSA-rg56-94j7-hjx9

GHSA-rg56-94j7-hjx9

Moodle has a SQL injection risk in course search module list filter

Source: GitHub Advisory Database (reviewed) High CVE-2025-26533

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 4.5.0-beta, < 4.5.2 4.5.2
Packagist moodle/moodle >= 4.4.0-beta, < 4.4.6 4.4.6
Packagist moodle/moodle >= 4.3.0-beta, < 4.3.10 4.3.10
Packagist moodle/moodle < 4.1.16 4.1.16

Details

As written in the advisory (Markdown source, shown as plain text).

An SQL injection risk was identified in the module list filter within course search.

References

External links from the advisory. They lead to third-party sites.