CVE-2021-21809

Name of the Vulnerable Software and Affected Versions Moodle version 3.10

Description A command execution vulnerability exists in the default legacy spellchecker plugin. This issue can be exploited through a specially crafted series of HTTP requests, leading to command execution. An attacker must have administrator privileges to exploit this vulnerability.

Recommendations For Moodle version 3.10, consider disabling the default legacy spellchecker plugin until a patch is available to prevent command execution. Restrict access to administrator privileges to minimize the risk of exploitation.