CVE-2011-4582: Moodle

Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days.

Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.

Affected products

• Moodle Moodle: version 2.1.0 only; version 2.1.1 only; version 2.1.2 only

Published 2012-07-20. Last modified 2026-06-16.