CVE-2009-0499: Moodle

Medium severity, CVSS 6.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php.

Affected products

• Moodle Moodle: version 1.7.1 only; version 1.7.2 only; version 1.7.3 only; version 1.7.4 only; version 1.7.5 only; version 1.7.6 only; …

Published 2009-02-10. Last modified 2026-06-16.