CVE-2026-102581

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) flaw. This allows an attacker to inject malicious content into a forum post, which executes arbitrary script code in the browser of any user who views the affected post. Cross-site scripting (XSS) is a type of security flaw where malicious scripts are injected into otherwise trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.