moodle-mod_vpl vulnerabilities

CVEs whose affected-version data names the moodle-mod_vpl package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113683Medium· 6.1

today

VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename

VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers ca…

▾ Sunlitjcrodriguez-dis · moodle-mod_vplvia CVEORG