Is CVE-2026-102581 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102581?

CVE-2026-102581 has a CVSS v3 severity of MEDIUM (4.6).

Back

CVE-2026-102581

Description

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing the affected post.