CVE-2015-5342: Moodle

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state.

Affected products

• Moodle Moodle: up to and including 2.6.11; version 2.7.0 only; version 2.7.1 only; version 2.7.2 only; version 2.7.3 only; version 2.7.4 only; …

Published 2016-02-22. Last modified 2026-06-17.