CVE-2026-113683Published
VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-113683 · Microsoft / collected KEV context
cve-program · CVE-2026-113683
- https://github.com/jcrodriguez-dis/moodle-mod_vpl/commit/5dd7fe00df2816b692f8ea262c6fa8cdee0b26b7
- https://github.com/jcrodriguez-dis/moodle-mod_vpl/releases/tag/V5.0.0
- https://github.com/jcrodriguez-dis/moodle-mod_vpl/blob/V4.5.0/similarity/diff.class.php#L412-L419
- https://www.vulncheck.com/advisories/vpl-for-moodle-before-5.0.0-reflected-xss-via-similarity-diff-php-filename
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.