{"schema_version":1,"title":"Moodle vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Moodle: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2022-50943, was published on 10 May 2026.","url":"https://junglewise.ai/threats/technologies/moodle","json_url":"https://junglewise.ai/threats/technologies/moodle.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/moodle","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":13,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":1},"latest":[{"cve":"CVE-2022-50943","cvss":6.1,"epss":0.0011,"slug":"cve-2022-50943-moodle-lms-cross-site-scripting-in-course-search","title":"Moodle LMS cross-site scripting in course search","severity":"medium","exploited":false,"published_at":"2026-05-10T13:16:31.997+00:00","url":"https://junglewise.ai/threats/cve-2022-50943-moodle-lms-cross-site-scripting-in-course-search"},{"cve":"CVE-2013-4942","cvss":4,"epss":0.0119,"slug":"cve-2013-4942-yahoo-yui-flashuploader-swf-cross-site-scripting","title":"Yahoo YUI flashuploader.swf cross-site scripting","severity":"medium","exploited":false,"published_at":"2022-05-13T01:12:55+00:00","url":"https://junglewise.ai/threats/cve-2013-4942-yahoo-yui-flashuploader-swf-cross-site-scripting"},{"cve":"CVE-2013-4940","cvss":4,"epss":0.0149,"slug":"cve-2013-4940-yahoo-yui-cross-site-scripting-in-io-swf","title":"Yahoo YUI Cross-site Scripting in io.swf","severity":"medium","exploited":false,"published_at":"2022-05-13T01:12:54+00:00","url":"https://junglewise.ai/threats/cve-2013-4940-yahoo-yui-cross-site-scripting-in-io-swf"},{"cve":"CVE-2013-4941","cvss":4,"epss":0.0119,"slug":"cve-2013-4941-yui-uploader-cross-site-scripting-in-flash-component","title":"YUI Uploader cross-site scripting in flash component","severity":"medium","exploited":false,"published_at":"2022-05-13T01:12:54+00:00","url":"https://junglewise.ai/threats/cve-2013-4941-yui-uploader-cross-site-scripting-in-flash-component"},{"cve":"CVE-2017-2578","cvss":6.1,"epss":0.0086,"slug":"cve-2017-2578-moodle-xss-in-assignment-submission-page","title":"Moodle XSS in assignment submission page","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.44+00:00","url":"https://junglewise.ai/threats/cve-2017-2578-moodle-xss-in-assignment-submission-page"},{"cve":"CVE-2017-2576","cvss":5.3,"epss":0.0102,"slug":"cve-2017-2576-moodle-incorrect-attribute-sanitization-in-forums","title":"Moodle incorrect attribute sanitization in forums","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.393+00:00","url":"https://junglewise.ai/threats/cve-2017-2576-moodle-incorrect-attribute-sanitization-in-forums"},{"cve":"CVE-2016-8644","cvss":5.3,"slug":"cve-2016-8644-moodle-improper-access-control-in-course-notes","title":"Moodle improper access control in course notes","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.377+00:00","url":"https://junglewise.ai/threats/cve-2016-8644-moodle-improper-access-control-in-course-notes"},{"cve":"CVE-2016-8643","cvss":4.3,"slug":"cve-2016-8643-moodle-improper-access-control-in-web-services","title":"Moodle improper access control in web services","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.347+00:00","url":"https://junglewise.ai/threats/cve-2016-8643-moodle-improper-access-control-in-web-services"},{"cve":"CVE-2016-8642","cvss":5.3,"slug":"cve-2016-8642-moodle-improper-access-control-in-question-engine","title":"Moodle improper access control in question engine","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.313+00:00","url":"https://junglewise.ai/threats/cve-2016-8642-moodle-improper-access-control-in-question-engine"},{"cve":"CVE-2016-7038","cvss":7.3,"epss":0.0097,"slug":"cve-2016-7038-moodle-web-service-token-invalidation-failure-on-password-change","title":"Moodle web service token invalidation failure on password change","severity":"high","exploited":false,"published_at":"2017-01-20T08:59:00.283+00:00","url":"https://junglewise.ai/threats/cve-2016-7038-moodle-web-service-token-invalidation-failure-on-password-change"},{"cve":"CVE-2016-5014","cvss":5.4,"epss":0.0098,"slug":"cve-2016-5014-moodle-information-disclosure-in-event-monitor-notifications","title":"Moodle information disclosure in Event Monitor notifications","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.253+00:00","url":"https://junglewise.ai/threats/cve-2016-5014-moodle-information-disclosure-in-event-monitor-notifications"},{"cve":"CVE-2016-5013","cvss":5.4,"epss":0.0105,"slug":"cve-2016-5013-moodle-email-header-injection-vulnerability","title":"Moodle email header injection vulnerability","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.22+00:00","url":"https://junglewise.ai/threats/cve-2016-5013-moodle-email-header-injection-vulnerability"},{"cve":"CVE-2016-5012","cvss":5.3,"epss":0.011,"slug":"cve-2016-5012-moodle-improper-authorization-in-glossary-search","title":"Moodle improper authorization in glossary search","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.19+00:00","url":"https://junglewise.ai/threats/cve-2016-5012-moodle-improper-authorization-in-glossary-search"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Moodle","slug":"moodle","vendor":{"name":"Moodle","slug":"moodle","url":"https://junglewise.ai/threats/vendors/moodle"},"aliases":[],"category":"cms","homepage":"https://moodle.org/","repo_url":"https://github.com/moodle/moodle","description":"Moodle is an open-source learning management system (LMS) written in PHP and distributed under the GNU General Public License.","url":"https://junglewise.ai/threats/technologies/moodle"},"most_severe":[{"cve":"CVE-2016-7038","cvss":7.3,"epss":0.0097,"slug":"cve-2016-7038-moodle-web-service-token-invalidation-failure-on-password-change","title":"Moodle web service token invalidation failure on password change","severity":"high","exploited":false,"published_at":"2017-01-20T08:59:00.283+00:00","url":"https://junglewise.ai/threats/cve-2016-7038-moodle-web-service-token-invalidation-failure-on-password-change"},{"cve":"CVE-2017-2578","cvss":6.1,"epss":0.0086,"slug":"cve-2017-2578-moodle-xss-in-assignment-submission-page","title":"Moodle XSS in assignment submission page","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.44+00:00","url":"https://junglewise.ai/threats/cve-2017-2578-moodle-xss-in-assignment-submission-page"},{"cve":"CVE-2022-50943","cvss":6.1,"epss":0.0011,"slug":"cve-2022-50943-moodle-lms-cross-site-scripting-in-course-search","title":"Moodle LMS cross-site scripting in course search","severity":"medium","exploited":false,"published_at":"2026-05-10T13:16:31.997+00:00","url":"https://junglewise.ai/threats/cve-2022-50943-moodle-lms-cross-site-scripting-in-course-search"},{"cve":"CVE-2016-5013","cvss":5.4,"epss":0.0105,"slug":"cve-2016-5013-moodle-email-header-injection-vulnerability","title":"Moodle email header injection vulnerability","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.22+00:00","url":"https://junglewise.ai/threats/cve-2016-5013-moodle-email-header-injection-vulnerability"},{"cve":"CVE-2016-5014","cvss":5.4,"epss":0.0098,"slug":"cve-2016-5014-moodle-information-disclosure-in-event-monitor-notifications","title":"Moodle information disclosure in Event Monitor notifications","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.253+00:00","url":"https://junglewise.ai/threats/cve-2016-5014-moodle-information-disclosure-in-event-monitor-notifications"},{"cve":"CVE-2016-5012","cvss":5.3,"epss":0.011,"slug":"cve-2016-5012-moodle-improper-authorization-in-glossary-search","title":"Moodle improper authorization in glossary search","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.19+00:00","url":"https://junglewise.ai/threats/cve-2016-5012-moodle-improper-authorization-in-glossary-search"},{"cve":"CVE-2017-2576","cvss":5.3,"epss":0.0102,"slug":"cve-2017-2576-moodle-incorrect-attribute-sanitization-in-forums","title":"Moodle incorrect attribute sanitization in forums","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.393+00:00","url":"https://junglewise.ai/threats/cve-2017-2576-moodle-incorrect-attribute-sanitization-in-forums"},{"cve":"CVE-2016-8644","cvss":5.3,"slug":"cve-2016-8644-moodle-improper-access-control-in-course-notes","title":"Moodle improper access control in course notes","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.377+00:00","url":"https://junglewise.ai/threats/cve-2016-8644-moodle-improper-access-control-in-course-notes"},{"cve":"CVE-2016-8642","cvss":5.3,"slug":"cve-2016-8642-moodle-improper-access-control-in-question-engine","title":"Moodle improper access control in question engine","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.313+00:00","url":"https://junglewise.ai/threats/cve-2016-8642-moodle-improper-access-control-in-question-engine"},{"cve":"CVE-2016-8643","cvss":4.3,"slug":"cve-2016-8643-moodle-improper-access-control-in-web-services","title":"Moodle improper access control in web services","severity":"medium","exploited":false,"published_at":"2017-01-20T08:59:00.347+00:00","url":"https://junglewise.ai/threats/cve-2016-8643-moodle-improper-access-control-in-web-services"}],"generated_at":"2026-09-26T19:07:00.176898+00:00"}