Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2025-26529 PoC — Stored XSS risk in admin live log

Source
Associated Vulnerability
Title:Stored XSS risk in admin live log (CVE-2025-26529)
Description:Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.
Description
Environment used to find Moodle CVE-2025-26529
Readme
# Moodle Docker Setup

This project provides a quick and easy way to set up and debug a Moodle environment using Docker and Docker Compose. 

## Version

- **Moodle Version**: 4.4.5

## Vulnerability Information

Please note that this setup is **vulnerable to CVE-2025-26529**.

## Prerequisites

Before you begin, ensure you have the following installed on your system:

- [Docker](https://docs.docker.com/get-docker/)
- [Docker Compose](https://docs.docker.com/compose/install/)
- [Visual Studio Code (VS Code)](https://code.visualstudio.com/) (Recommended for development)

## Getting Started

Follow these steps to get your Moodle environment up and running:

### 1. Clone the repository

Clone this repository to your local machine:

```bash
git clone <repository-url>
```


### Download the moodle source code 
```bash
wget https://github.com/moodle/moodle/archive/refs/tags/v4.4.5.zip
unzip v4.4.5.zip 
mv moodle-4.4.5 src
```

```bash
docker-compose up -d
```
```bash
chmod 777 moodledata
```
# moodleTestingEnv
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →