TI-2026-76950 CVE-2026-113683 · GHSA-2929-5xr7-ghmp
Reflected cross-site scripting in VPL for Moodle diff.php
Priority LOW 23
VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.…