Moodle
MSA-26-0021: CSRF and XSS in grade item idnumber editing
MSA-26-0021 Jun 22, 2026 Source: Vendor
Imported by the Moodle advisory catcher from https://moodle.org/security/. Severity Serious. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://moodle.org/mod/forum/discuss.php?d=481821#p1908116
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1 line
Showing 1–1 of 1
CVE-2026-58340
BR2026-0000-008655
Serious
unclaimed
MSA-26-0021: CSRF and XSS in grade item idnumber editing
Credited as Paul Holden