CVE-2026-102581
MEDIUM
NVD
CVSS Score
4.6
Severity
MEDIUM
Published
Sep 30, 2026
Vendor
unknown
Description
A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.