Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.
PoC: UNISA_CVE-2025-26529
This repository contains a comprehensive Proof-of-Concept (PoC) scanner and exploitation framework targeting CVE-2025-26529, a critical XSS vulnerability in vulnerable Moodle instances.
PoC: moodle-cve
Web CTF challenge highlighting moodle CVE-2025-26529 (in 2 flavors)
PoC: PoC-CVE-2025-26529
SSRF to XSS - XSS to RCE Moodle
PoC: moodleTestingEnv
Environment used to find Moodle CVE-2025-26529
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free