SQL Injection Vulnerability in Moodle Affecting User Data Submission

CVE-2023-30944

What is CVE-2023-30944?

A security vulnerability identified in Moodle stems from inadequate sanitization of user-supplied data, which can be exploited through the external Wiki method for listing pages. An attacker can craft a malicious request that, when processed by the application, enables them to execute limited SQL commands against the application database, potentially compromising data integrity and user information.

References