UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21809

A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.

Severity
Critical 9.1
Published
23 Jun 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MoodleServers and applications · cpe:a:moodle:moodle
  • Version 3.10.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21809
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21809