CVE-2016-2152: Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x bef...

Security readout for executives and security teams

This is a Moodle cross-site scripting issue in the external database authentication code. If an affected site imports or displays malicious profile-field content from an external database, a remote attacker could cause script or HTML to run in users' browsers. The source bundle does not show active exploitation or CVSS severity. Exposure is most likely on old Moodle deployments that use external database authentication with profile fields. Sites already upgraded beyond the fixed versions, or not using that authentication path, are less likely exposed based on the provided sources. Prioritize remediation if the organization still runs legacy Moodle with external database authentication. For current supported Moodle versions, urgency is lower, but confirm rather than assume because older learning platforms often persist unnoticed. Mitigation focus: Upgrade affected Moodle branches to the fixed versions or later supported releases.; Move Moodle 2.6.x deployments to a supported, fixed branch.; Review Moodle advisory and MDL-50705 guidance before applying operational workarounds..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.