CVE-2025-26532
CVSS 3.1 Score 3.1 of 10 (low)
Details
Published Feb 24, 2025
CWE ID 863
Summary
CVE-2025-26532 is a vulnerability affecting the trusttext application in certain software. When restoring glossary entries, insufficient checks were implemented, allowing potential attackers to bypass the trusttext feature if it was enabled. This issue could lead to the injection of malicious content, potentially putting data integrity at risk. To mitigate this vulnerability, it is recommended that additional checks be implemented to ensure the trusttext is properly applied to glossary entries during the restoration process.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Moodle
Affected Vendors
- Moodle