A vulnerability, which was classified as problematic, was found in moodle up to 4.1.21/4.4.11/4.5.7/5.0.3/5.1.0. This impacts an unknown function of the component Policy Tool. The manipulation results in cross site scripting.

This vulnerability was named CVE-2025-67855. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.