CVE-2026-102586 | Moodle up to 4.5.12/5.0.8/5.1.5/5.2.1 Password Reset Page cross site scripting

September 30, 2026 Yanac

A vulnerability has been found in Moodle up to 4.5.12/5.0.8/5.1.5/5.2.1 and classified as problematic. This vulnerability affects unknown code of the component Password Reset Page. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-102586. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More