A vulnerability classified as problematic was found in Moodle up to 4.5.7/5.0.3/5.1.0. The impacted element is an unknown function of the component AI Prompt Response Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2025-67849. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.