CVE-2025-67849

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.

• CWE-79

• https://access.redhat.com/security/cve/CVE-2025-67849Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2423835Issue Tracking, Third Party Advisory

Published

Feb 3, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67843A Server-Side Template Injection (SSTI) vulnerability in the…9.8
• CVE-2025-67844The GitHub Integration API in Mintlify Platform before 2025-…4.3
• CVE-2025-67845A Directory Traversal vulnerability in the Static Asset Prox…5.4
• CVE-2025-67846The Deployment Infrastructure in Mintlify Platform before 20…6.5
• CVE-2025-67847A flaw was found in Moodle. An attacker with access to the r…8.8
• CVE-2025-67848A flaw was found in Moodle. This authentication bypass vulne…8.1
• CVE-2025-6785Securing externally available CAN wires can easily allow phy…4.7
• CVE-2025-67850A flaw was found in moodle. This vulnerability, known as Cro…6.1
• CVE-2025-67851A flaw was found in moodle. This formula injection vulnerabi…7.8
• CVE-2025-67852A flaw was found in Moodle. An open redirect vulnerability i…6.1
• CVE-2025-67853A flaw was found in Moodle. A remote attacker could exploit …7.5
• CVE-2025-67855A flaw was found in mooodle. A remote attacker could exploit…6.1