Moodle Code Injection vulnerability

HIGH 8.8CVE-2023-5540 · BIT-moodle-2023-5540 · GHSA-w8x2-w4qr-v3x4 · Published 09/11/2023 · updated 17/06/2026

In short

CVE-2023-5540 is a HIGH (CVSS 8.8) vulnerability affecting moodle/moodle, extra packages for enterprise linux (fedoraproject), moodle (moodle).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.0% of all vulnerabilities.
Fix: update to 4.3.0-rc2, 3.11.17, 4.0.11, 4.1.6 or later.

Package	Affected versions	Patched versions
moodle/moodle Packagist	`< 4.3.0-rc2`	`4.3.0-rc2`
extra packages for enterprise linux fedoraproject	`= 7.0`	No fix yet
moodle moodle	`≥ 3.11.0, < 3.11.17≥ 4.0.0, < 4.0.11≥ 4.1.0, < 4.1.6≥ 4.2.0, < 4.2.3< 3.9.24`	`3.11.174.0.114.1.64.2.33.9.24`

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.

NVD description

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 4.3.0-rc2

4.3.0-rc2

= 7.0

No fix yet

≥ 3.11.0, < 3.11.17≥ 4.0.0, < 4.0.11≥ 4.1.0, < 4.1.6≥ 4.2.0, < 4.2.3< 3.9.24

3.11.174.0.114.1.64.2.33.9.24

More vulnerabilities in moodle/moodle

See all →