PT-2026-26023 · Moodle+1 · Moodle+1

Taka-Cst

·

Published

2026-03-15

·

Updated

2026-03-18

·

CVE-2026-30884

CVSS v3.1

9.6

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions mdjnelson/moodle-mod customcert versions prior to 4.4.9 and 5.0.3
Description The mdjnelson/moodle-mod customcert plugin for Moodle, used for creating dynamically generated certificates, contains a flaw where a teacher with the mod/customcert:manage permission in any course can read and silently overwrite certificate elements belonging to other courses within the Moodle installation. This occurs because the core get fragment callback editelement and the mod customcert save element web service do not verify that the supplied elementid belongs to the authorized context. This enables cross-course information disclosure and data tampering. The elementid parameter is vulnerable, allowing unauthorized access and modification of certificate data.
Recommendations Versions prior to 4.4.9 should be updated to version 4.4.9 or later. Versions prior to 5.0.3 should be updated to version 5.0.3 or later.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

BDU:2026-07583
CVE-2026-30884
GHSA-8PJR-J7R4-CCJX

Affected Products

Moodle
Moodle-Mod Customcert