A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.691
EPSS Ranking 98.5%