low3.1
CVE-2025-26532
Moodle allows teachers to evade trusttext config when restoring glossary entries
Impact
Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | moodle/moodle | >= 4.5.0-beta, < 4.5.2 | 4.5.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | from 4.1.0 before 4.1.16 from 4.3.0 before 4.3.10 from 4.4.0 before 4.4.6 from 4.5.0 before 4.5.2 |