https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T06:06:29.893562+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTA-2008-AVI-527 CERTA-2008-AVI-527 — De multiples vulnérabilités dans <span class="textit">Moodle</span> permettent l'exécution de code arbitraire à distanc… 2026-10-12T06:06:32.184493+00:00 CERTA-2008-AVI-527 https://vulnerability.circl.lu/vuln/fkie_cve-2008-1502 fkie_cve-2008-1502 2026-10-12T06:06:32.184596+00:00

The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.

 https://vulnerability.circl.lu/vuln/ghsa-v759-3wr5-p294 GHSA-v759-3wr5-p294 — Moodle vulnerable to Cross-site scripting 2026-10-12T06:06:32.184647+00:00

Affected: Packagist: moodle/moodle

The `_bad_protocol_once` function in `phpgwapi/inc/class.kses.inc.php` in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.

 https://vulnerability.circl.lu/vuln/gsd-2008-1502 gsd-2008-1502 2026-10-12T06:06:32.184683+00:00 gsd-2008-1502