CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113683
MEDIUMCVSS 6.1NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs whe
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-113719 MEDIUM 4.5
- CVE-2026-113716 MEDIUM 4.5
- CVE-2026-113708 CRITICAL 9.9
- CVE-2026-113709 CRITICAL 9.9
- CVE-2026-113643 MEDIUM 4.3
- CVE-2026-113710 MEDIUM 5.9
- CVE-2026-113711 HIGH 7.5
- CVE-2026-113666 HIGH 7.1
- CVE-2026-113668 MEDIUM 5.3
- CVE-2026-113670 MEDIUM 5.3