Back to Database
Status published
Medium
CVE-2025-26527
Non-searchable tags can still be discovered on the tag search page and in the tags block
Vulnerability Description
Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-26527
Credits & Attribution
No credits recorded in the NVD database.
References
More from Moodle Project
View All →CVE-2025-26533
SQL injection risk in course search module list filter
High
8.1
CVE-2025-26532
Teachers can evade trusttext config when restoring glossary entries
Low
3.1
CVE-2025-26531
IDOR in badges allows disabling of arbitrary badges
Low
3.1
CVE-2025-26530
Reflected XSS via question bank filter
High
8.3
CVE-2025-26529
Stored XSS risk in admin live log
High
8.3
Affected Vendor
Moodle Project
View all reports →Affected Software
moodle
Vulnerable Versions:
4.5.0, 4.4.0, 4.3.0, 4.1.0, 4.2.0, 0
Timeline
Official Publish:
February 24th, 2025
Last Modified:
February 24th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.