Vulnerability Details CVE-2026-102581
A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.8%
CVSS Severity
CVSS v3 Score 4.6