CVE-2014-3545: Moodle

Medium severity, CVSS 6.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.

Affected products

• Moodle Moodle: version 2.7.0 only; version 2.4.0 only; version 2.4.1 only; version 2.4.2 only; version 2.4.3 only; version 2.4.4 only; …

Published 2014-07-29. Last modified 2026-06-17.