Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-58341 1 Moodle 1 Moodle 2026-07-28 3.5 Low
A flaw was found in Moodle. The actions to enable and disable group messaging did not include the necessary token to prevent a Cross-Site Request Forgery (CSRF) risk. A remote attacker could exploit this by tricking an authenticated user into performing unintended actions, potentially leading to unauthorized changes in group messaging settings.