Moodle Mod Vpl
Approved changes feed: RSS · Atom
cpe:2.3:a:jcrodriguez-dis:moodle-mod_vpl:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Jcrodriguez Dis (84f6af78-91c2-5223-8d3a-35a545bc33fc) |
|---|---|
| Product | Moodle Mod Vpl (c45eb78a-1cdd-5461-b57f-84e0e94ae8ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-113683 |
vulnerable | 2026-11-03 10:16:27.441333 |
VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename
MEDIUM (6.1)
VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs when a user holding mod/vpl:similarity opens it, performing actions or disclosing data under their session.
Published: 2026-10-20T15:40:43.190Z
Updated: 2026-10-23T01:48:46.789Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.