Skip to content
OpenAdvisories

Vendor

jleyva

2 known vulnerabilities.

Products

moodle-block_configurablereports 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-113608

    Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

    Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerability in report_sql::prepare_sql() via the filter_var request parameter of viewreport.php. Low-privileged users permitted to view reports u…

    jleyva moodle-block_configurablereports Web / CMS
  • Medium 6.5
    CVE-2026-113607

    Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data

    Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the block_configurable_reports_get_report_data web service. When check_permissions fails, the …

    jleyva moodle-block_configurablereports Web / CMS