CVE-2026-113683 | Moodle Virtual Programming Lab up to 4.x Similarity Diff similarity/diff.php filename1/filename2 cross site scripting

October 20, 2026 Yanac

A vulnerability identified as problematic has been detected in Moodle Virtual Programming Lab up to 4.x. The affected element is an unknown function of the file similarity/diff.php of the component Similarity Diff. The manipulation of the argument filename1/filename2 leads to cross site scripting.

This vulnerability is traded as CVE-2026-113683. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More