Skip to content
OpenAdvisories

Vendor

jcrodriguez-dis

1 known vulnerabilities.

Products

moodle-mod_vpl 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-113683

    VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename

    VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php lin…

    jcrodriguez-dis moodle-mod_vpl Web / CMS