Threats tagged 'bit-moodle-2025-26528'

A stored cross-site scripting (XSS) vulnerability exists in the drag-and-drop onto image (ddimageortext) question type in Moodle. This issue arises due to insufficient sanitization of input, allowing malicious scripts to be stored and potentially executed when the content is viewed. The vulnerability affects multiple Moodle versions prior to their respective patches. A fix has been made available to address this sanitization deficiency.