CVE-2024-48897: Moodle

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.

Affected products

• Moodle Moodle: up to and including 4.1.14; from 4.2.0, up to and including 4.2.11; from 4.3.0, up to and including 4.3.8; from 4.4.0, up to and including 4.4.4

Published 2024-11-18. Last modified 2026-06-17.