← CVE Intelligence

CVE-2025-26532

Teachers can evade trusttext config when restoring glossary entries PUBLISHED

Description (CNA)

Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.

Affected (CNA)

Vendor / productVersions
Moodle Project / moodleaffected 4.5.0 before 4.5.2; affected 4.4.0 before 4.4.6; affected 4.3.0 before 4.3.10; affected 4.1.0 before 4.1.16; unknown 0 before 4.0.*; unknown 4.2.0 before 4.2.*

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.