https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T22:31:50.549870+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-228 CERTFR-2015-AVI-228 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… 2026-10-09T22:31:50.752501+00:00 CERTFR-2015-AVI-228 https://vulnerability.circl.lu/vuln/bdu:2015-10891 bdu:2015-10891 2026-10-09T22:31:50.752603+00:00 bdu:2015-10891 https://vulnerability.circl.lu/vuln/cnvd-2015-03654 cnvd-2015-03654 2026-10-09T22:31:50.752630+00:00 cnvd-2015-03654 https://vulnerability.circl.lu/vuln/fkie_cve-2015-3178 fkie_cve-2015-3178 2026-10-09T22:31:50.752652+00:00

Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.

 https://vulnerability.circl.lu/vuln/ghsa-9fmw-m4qx-6cq8 GHSA-9fmw-m4qx-6cq8 — Moodle cross-site scripting (XSS) vulnerability 2026-10-09T22:31:50.752707+00:00

Affected: Packagist: moodle/moodle

Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.

 https://vulnerability.circl.lu/vuln/gsd-2015-3178 gsd-2015-3178 2026-10-09T22:31:50.752752+00:00 gsd-2015-3178 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-3178 Withdrawn: UBUNTU-CVE-2015-3178 2026-10-09T22:31:50.752771+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle

Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.