CVE-2026-102588 | Moodle up to 4.5.12/5.0.8/5.1.5/5.2.1 XML grade import feature cross-site request forgery

September 30, 2026 Yanac

A vulnerability was found in Moodle up to 4.5.12/5.0.8/5.1.5/5.2.1 and classified as problematic. This issue affects some unknown processing of the component XML grade import feature. The manipulation results in cross-site request forgery.

This vulnerability is cataloged as CVE-2026-102588. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More