CVE-2025-63564

CVSS 9.8 (critical) · published 2026-09-23

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

Weakness: CWE-89

Source: NVD CVE-2025-63564

References

• http://moodle.com
• https://medium.com/@lcrawfqrd/sqli-in-moodle-plugin-9f0ce4eb05f2

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.