The Moodle Socialwall plugin versions 3.0 up to but not including 3.4 contain an SQL injection vulnerability. This vulnerability enables an attacker to execute arbitrary code via crafted HTTP requests targeting the plugin. No CVSS score is provided, and no known exploits in the wild have been reported as of the publication date.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system, potentially leading to unauthorized data access or system compromise. The exact impact depends on the environment and privileges of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates and consider restricting access to the affected plugin where possible.