CVE-2025-49512 in Moodle

Prediction

by VulDB Data Team • 07/17/2025

A vulnerability was identified in Moodle 5.0. The impacted element is an unknown function of the component MathJax. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.0.1 is sufficient to resolve this issue. It is advisable to upgrade the affected component.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 06/06/2025
• Moderation: accepted
• Entry: VDB-316731
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Education, Police

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-49512
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-49512
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-49512/