CVE-2021-3943: Moodle

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified.

Affected products

• Moodle Moodle: from 3.9.0, up to and including 3.9.10; from 3.10.0, up to and including 3.10.7; from 3.11.0, up to and including 3.11.3

Published 2021-11-22. Last modified 2026-06-17.